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Cell sites Cellular Telephone Cell Sites. Just about every city has at least two of these located within their city limits, with the 
exception of some little known towns out in the middle of BFE - but, hey. . they most likely don't even have electricity or a 
phone system, for that matter. Anyhow, the point is - most of us have these cell sites somewhere nearby, quietly taking cell 
phone calls, connecting people to other people... and some cellular provider is raking in the $$$ as each call is made. 
Sometimes, you just have to wonder WHY? Why do people make calls through these things if they're so damn expensive? 
^^^^j^^^^^^^^^^^^^^^^^^^^^^n " s rea "y verv simple. Because it's different, it's useful and it's a way to 

impress people Ego is probably the #1 reason why most non-business 
type people have a cell phone installed in their car or strapped onto their 
belt. The truth is, the use of cell phones is just TOO EXPENSIVE to the 
average Joe who wants one. Now. why are they expensive? It's a 
relatively new technology and the providers can get away with making 
people pay through the nose. Few people, in relation to total population, 
own a cellular telephone, so the subscriber charge must be high, to offset 
_. . this low useage Perhaps if every single person in the United States alone 

LlStlDfl, Kefl DOXinfl, Ieleph0n6 had and paid for use of a cellular phone, maybe the price would go 

down. ..but We don't suggest you holding your 
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breath waiting for such a thing to take place It 
will, unfortunately, probably never happen in our 
lifetime. Go figure. Another reason why prices 
are so high is due to what is known as "Cellular 
Hacking" in which someone or some group of 
people simply make unauthorized phone calls on 
a subscribers cell phone service. Either by theft 
of the actual phone OR by cloning a subscribers 
cell phone - with important information stored 
inside their cellular phone Yes, it CAN be done, 
and it IS being done. It costs cell phone providers 
millions in losses each year It's something to 
consider when purchasing that new Cell Phone! 
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Pictured on the front cover is a cellular telephone cell site. This is the "antenna" used by cellular phone 
companies to connect subscribers cell phones into the telecommunications network. Every year, as cell 
phones get more and more popular amongst business people (large and small companies), the cell phone 
"dark side" is gaining just as much popularity. Cellular Phreaking has become very wide spread and is costing 
the cellular telephone service providers millions of dollars in lost revenue each year. People would like to 
believe that they're safe from this "phreaking"... which is simply not true. If you use a cellular telephone, 
someone... heck, anyone (with the proper knowledge) can "phreak" your cell phone. The term phreaking 
means the use of telephone service (or any service, really) from someone other than the subscriber with the 
intent to defraud the service provider. Not only is this extremely illegal and carry some hefty penalties, but it's 
also a huge nuisance to those subscribers who fall victim to this treachery. This type of theft is that of an 
anonymous person - the victim nor the thief having a "face." It's slick, clean and it's easy to do. You'd be 
surprised at what type of people do this sort of thing, really. The boy next door, your boss, the mailman, your 

teacher your dad? Who knows.. .and that's what is so appealing to people considering this. They can get 

away with something that is just as useful as is it exciting. It's so appealing to the tune of a few million dollars 
in cellular revenue losses each year. For the experience cellular phreaker, they can get away with this day 
after day after day and never be caught. That's right - NEVER! No matter how tough laws become. No 
matter what the penalties are. No matter what precautions are invoked. No matter what ridiculous incentive 
or bills fat pig politicians get passed, the fact is that this type of theft is here to STAY. Why is it? Let's put this 
in small words. Anything, no matter how secure it may be, will fall victim to people armed with knowledge! 
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Introduction 



Hi everyone! We re here with another issue of Blacklisted! 
411. I'm sure all the veteran readers know all about the 
magazine, but for the new people joining the viewing 
audience, Let's recap what this magazine is all about and 
where it came from. ..Read this once again: 

This magazine is provided to the individuals out there who 
are interested in knowing more than they're supposed to, 
according to the powers that be. We would like to basically 
tell the powers, more or less, we are ALL entitled to, and have 
a right to free information. We are here to tell the people what 
they want to know. You wanted us, here we are. 

Anyhow, we're nearing the end of our second volume. Yes, 
we've been here for nearly two years now. The first volume 
consisted of 1 2 whole issues. We decided to go to a quarterly 
format for our second year? Why? Distribution! We wanted 
more people to read what we had to say, so we concentrated 
on producing MORE copies for each issue It's worked out 
very well for us - and our readers. 

Originally, we came up with the magazine because we 
were all looking for a magazine which covered more than 
telephone hacking, etc. So, with a lot of work and such, we 
managaed to produce our first issue of Blacklisted! 41 1 and 
had it on the shelves January, 1994. It was an exciting time 
for us. 

Everyone who was around when we first came about 
knows exactly where our inspiration came from - 2600 
Magazine. That's right! Anyhow, this is probably the one 
reason why our magazine does resemble 2600 so much. 



Apparently this fact has upset a few people throughout the 
hacker community, including the originator/publisher/editor of 
2600, himself - Emmanuel Goldstein It was never our intent 
to become a "fake 2600" or anything of the such, and we are 
NOT such a magazine, but we can see how people notice the 
similarities and we are going to work very hard on changing 
our format enough to the point where you will not notice the 
similarities as well. 

Emmanuel Goldstein (the editor of 2600) has always been 
a role model to us and for us to find out that he is very 
UNHAPPY with our magazine is less than comforting for us, 
to say the least. Our inspiration will always be from the trail 
he has left from his work over the last decade and we intend 
only to compliment his publication, not copy or emulate it in 
any way 

If you will take a moment to look over our magazine closely 
enough, you WILL see the differences in formats. We cover 
a much more broad topic base. For example, we cover power 
company activities, cable companies, etc. This is something 
that 2600 usually stays away from. Why? Well, a few years 
back when they DID try to cover such material, many people 
were upset with them and let them "have it" with both barrels! 
2600 changed back to original topic Phones! 

For Emmanuel Goldstein. You probably have not seen 
many issues of our magazine. Stick with us and give us a 
chance. We're doing what we can to meet your demands 
The marketplace has been changed back to its old name; 
"The Black Market" We're making the changes you require. 



Lettet fromiheEdtvr 



Hi again to all the devoted readers out there!! 
There's much to say and not a whole lot of room to 
cover everything thoroughly, so I'll get in as much as 
I can and try to keep it as simple for all of you as I 
possibly can. 

Again, I would like to thank all of those of you 
who've been sending in articles, questions and 
advertising the magazine for us. You guys have been 
doing a great job! I would like to take this moment to 
personally thank Tom Farley, Editor and Publisher of 
"Private Line" for the recent effort on his part to 
promote our magazine at local 2600 meetings and 
such. We'd like to let all of you know that we, here at 
Blacklisted! 411, think he's a great dood. His 
magazine, again, is called "Private Line" and it's a bi- 
monthly production. We've seen them at Tower 
Records/Books, so that's one place to start the 
search for his magazine. You may contact him at: 
5150 Fair Oaks Blvd. #101-348, Carmichael, CA 
95608. Voice: (916)488-4231, Fax: (916)978-0810. 
Subscriptions to Private Line is S24/yr. for 6 issues. 
Tell him Blacklisted! sentya! 

It appears that there has been quite a bit of 
discussion (for lack of a friendlier term) about our 
magazine on alt.2600 and alt.zines recently. There 
are those who think our magazine "sucks" more or 
less, and that's fine. Everyone is entitled to their 
opinion and we're not out to make EVERYONE 
happy, because, in all honesty, it's simply impossible. 
The devoted readers of our magazine know that we're 
here to help you out the best we can - that's all. We're 
making no promises of being better than any other 
magazine, nor are we gloating about ourselves in any 
way. Let's get on with this. Many people posted their 
hatred for the magazine in the usenet sub and, 
because of that very fact, many people called in to 
subscribe - thank you. Anyhow, people stated that 



"Blacklisted sucks" and things along those lines, etc. 
Well, maybe we do. We don't think so, but you 
might..? Allegations were made about our integrity 
and particularly lead to the accusation of plagiarism, 
which is clearly unwarranted and untrue. With a lot of 
though about this and reading over the messages, we 
understand where this line of thought originated and 
why it might make sense to anyone who came up with 
it. Let us describe it a bit more. 

The first allegation was that we were plagiarizing 
material, "taking it from 2600 and printing it without 
proper credit given." We deny this statement entirely. 
We never took material out of ANY magazine and 
reprinted it. Here's the example. It was stated that 
our April 1995 issue's 5ESS article was a clear act of 
this crime. Why? Apparently this same article was 
printed in an Issue of 2600, Phrack! and HackTic, 
which we completely unaware of, as we find it very 
difficult to check the origin of every single article 
submitted to our office. Anyhow, the claim goes on to 
state that we gave no credit to the author nor the 
magazine it was is, etc. First of all, we did NOT steal 
any material. Someone submitted this article to us, 
claiming to be the author of said article. The fact is, 
the person who submitted the article asked to remain 
anonymous, which we honored and did not include 
his name with the article. We will state at this time 
that "WE" did not write this article. Yes, it was 
submitted. ..and printed. As for it being in an issue of 
2600, Phrack! and HackTic as said previously, we 
were not aware of this, it was not our intent to steal or 
plagiarize any material. Now what? It was a 
submission and we printed it That's all there is to it. 
We're sorry if it offended anyone at all. We would like 
to confirm that the article was, in fact, in those other 
publications, but we still have not seen it ourselves, 
so you figure it out. If you take a look at the material 
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in that article, it appears to be more cf a technical 
manual than an article. Anyhow, we're going to watch 
our submissions a little more closely. We'd love to 
work out a "trade arrangement" with 2600 to avoid this 
crap in the future, but that's most unlikely at this point, 
given the whole attitude of the people involved, but 
we would like to talk about it, if at all possible. 

The subject of the marketplace ads. It was stated 
that we placed advertisements taken out of 2600 
magazine for people/companies without their 
permission. When we first added the marketplace 
section in the Volume 1, Issue 7 copy of Blacklisted! 
411, we wanted to have a HUGE marketplace for 
people to browse through. Since we could not 
generate a large enough base of marketplace 
advertisements, we DID search through other 
magazines of similar format (including 2600 and Nuts 
& Volts and a few others) picked out ads we felt were 
appropriate and commenced to contact each one of 
these advertisers, explaining to them that they were 
going to be getting FREE advertising. Nearly every 
single one of them agreed to it. Hell, why not? It's 
FREE!! Anyhow, there were a few who did not want 
to commit to free advertising, so we left them out of 
our magazine. IF we mistakenly printed any 
advertising that was not wanted, again we apologize 
- but nobody has since bothered to say, "Hey! Don't 
advertise!'' Never was it our ill intent to get MORE 
advertising with this addition of a large amount of 
"free" advertising. This was done so our readers 
would have a lot of manufacturers to call. It's pretty 
dry when you don't have any cool advertising to read 
over, so we swallowed the cost and gave it to a select 
group of advertisers for free. Next? 

As for what we think about this whole thing - we're 
not really upset over it or anything, as we know that 
misunderstandings are easy to come by if things are 
not "spelled" out perfectly and our magazine does 
have an uncanny resemblance to 2600 - which we 
are attempting to alter. I suppose it was easy to let 
our magazine look a lot like 2600 over the last year or 
so, considering the fact that 2600 was our original 
inspiration, but again, we're not trying to copy them in 
any way. In this issue, we've bothered to change 
many things which were a concern of 2600's editor. 
The marketplace was touched up slightly, and ALL 
the advertisers were contacted. We've also decided 
to make it known when a person submits an article 
anonymously. We've changed some (a lot) of our 
"text boxes" to give a different appearance.... we 
reworded a lot of in house advertising, we even took 
the time to use even MORE text font types. I would 
like, however, to mention that our magazine covers a 
LOT more subjects, we use MANY more text font 
types, we use smaller text sizes throughout most of 
the pages within the magazine. ..etc., etc., 
etc.. .Anyhow, I certainly hope that Mr. Emmanuel 
Goldstein would be willing to speak on a non- 
destructive level with us about any such 
misunderstandings or concerns in the future. As 
we've said a million times before, we're not out to step 
on any toes or stab anyone in the back. We're here 
to pass information along to those people who do not 
have easy access to the information which some 
people may have readily access to. We hope to 
coexist with the other hacker magazines our there. 
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After all, we ARE all on the same side, believe it or 
not. Anyhow, I believe that about covers the 
Blacklisted conspiracy for now. 

The DEF CON III "Alternative Computer 
Convention" will be located at the Tropicana Hotel in 
Las Vegas Friday August 4th through Sunday the 6th. 
Dark Tangent is the one running the show, if you're 
not familiar with him. He's a pretty decent person. It'll 
cost ya $30 to attend if ya pay in advance or $40 at 
the door. There will be a Virtual World event on 
Friday afternoon, so you won't wanna miss out on that 
one! Check it out, people. It looks like there will be a 
lot going on over the weekend. Anyhow, take all the 
notes you can and be sure to send them in ASAP. I 
will be sending in a few people to look things over and 
report back to us, but I'd love to hear what ALL of you 
have to say about it! Ready for this? Def Con voice 
system: (801)855-3326, Fax: (206)453-9567 and 
VMB: (206)453-1006. Call them! 

We're getting closer and closer to our third year of 
existence, now. Blacklisted! 41 1 has been exciting, to 
say the least. Summer is here and that hacker spirit 
is at an all time high with the sun, the beaches close 
by, all those telephones in use, the cable trucks 
roaming around, utility men kicking back above our 
very homes while installing some service, etc. It's 
pretty damn cool, people. Anyhow, with the third year 
creeping up on us, all of us at Blacklisted! 411 
Magazine wanted to say "thanks!" to all of the people 
who've been gracious enough to help us out and 
cheer us on. 

You might notice that we have a few more pages 
devoted to the Amiga computer in this issue. Many of 
our readers have been pounding us non-stop for more 
info on the Amiga Computer line, so this is our first 
real attempt at it. Major Coyote has joined the staff 
and is in "charge" of the Amiga section of Blacklisted! 
411 from now on. 

Let's see here. We do get a lot of questions by 
phone and the #1 problem we have to deal with when 
we get questions in this manner is the fact that we 
usually do not know how to spell the alias given. It'd 
be a good idea to SPELL out your alias when you 
phone in any questions. Just a thought. 

Last but not least, I'm going to mention a tiny bit 
about display advertising. If YOU have a display ad 
for us to print and you want the best possible 
reproduction quality, I suggest that you submit your 
artwork in FILE format, rather than on paper. We can 
accept nearly any file format. Just make sure it's on 
an IBM formatted diskette and try to stick with the 
more popular file formats, such as TIF, PSD, PCX, 
etc.. If you have any questions about this particular 
area, please take the time to call in your questions 
before making any decisions. 
Ok. That about sums up everything we (I) needed to 
say. So, keep sending in all those questions, 
comments, complaints and such. Don't forget to keep 
mentioning the magazine to people when you have 
the time. Try to keep out of trouble, if at all possible! 
Have a bitchen' summer and we'll see you in the next 
issue of Blacklisted! 41 1 !! THANKS! Until next time, 
happy hacking. 



Zachary Blackstone - Editor 
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Feedback! 



Blacklisted 411, 

Upon reading your "Questions and Answers" section in the 
April 1995 issue, I spotted two problems. First off, someone 
named "Trapped" wrote in saying that he was receiving 
disturbing anonymous phone calls and he wanted to catch the 
person making the calls. Your advice was to install call return. 
This is a very simple solution to a much harder problem. Did 
it ever occur to you that the nefarious individual placing the 
calls would have blocked call return, not only will the person 
you are calling be unable to use the *69 method, your number 
would not show up on their caller id box either. Therefore 
there is no way that your advice would work under these 
circumstances. Now onto my next point. It was dishonest of 
you to let "German" believe that it was you who came up with 
the "Hallmark Redbox" idea. Maybe you republished the 
plans for the box, but we all know that the plans were 
originally disclosed in the autumn 1994 issue of 2600. I like 
your magazine but in the future try to be more accurate and 
honest in your replies to clueless readers who write in! L8a 
The Photon Messiah 

We just have to comment on this one. We agree with your 
first point - and it's well taken. We considered the alternatives 
and we decided to give the most simple possible solutions. If 
you have anything to add that may help "Trapped" by all 
means, please let us in on your advice We'd love to read 
your point of view on the subject As for the second point, we 
must disagree with you. Did you read any of the first volume 
issues? If not, let us tell you about them. First, we had 12 
issues. Yes, 12. One for each month. Our plans for the 
"Hallmark Redbox" were printed in the February issue, which 
was clearly printed 1-2 months BEFORE the 2600 version of 
the "Hallmark Redbox. " It's alright, you did not know about it, 
obviously. We'd be happy to sell you a copy of that issue 
when we print up a batch of first volume back issues, just to 
settle your mind on who had it first, etc., etc. . . We believe that 
if you had read the earlier issues of our magazine, you'd be 
prepared to make correct statements concerning such items. 
Don't get us wrong - we like to know what our readers think • 
and we like to correct small misunderstandings such as this 
one. We're glad you like the magazine and we will continue 
to do our best to inform our readers with the best answers we 
feel are appropriate AND to be just as honest as we've always 
been. We're about as point-blank as they come. Thanks for 
the feedback, Photon Messiah! We appreciate it much! 

Dear Blacklisted! 411, 

Your publication is simply the very best there is to find in the 
hacker's world Keep up the good work. 

A Pagan - Elizabeth, NJ 

Dear Blacklisted! 411, 

Hey dickwadsl! I've been slacking off for the last few days 
and taking a break, but I figured you guys were lonely over 
there since nobody buys your shitty magazine. I think you 
guys SUCK! I don't EVER want to see your useless magazine 
at my newsstand again. Unless you fascist pigs of society 
don't stop making that piece of shit magazine, expect to hear 
from me every single day! 

No Name left, so we'll call him BOB! 

I guess this means we'll be hearing from BOB a lot more. 
Yes, that's right. We 're still printing our piece of shit magazine 
- whether you like it or not! 

Dear Blacklisted! 411, 

I heard about your magazine on alt. 2600 and they were going 
on and on about your magazine. I can see why some of them 
said what they did, but I happen to like it. It's not really like 
2600, but that's alright. A different viewpoint is alright. Oh. 
and I wanted to tell you that I do NOT like the section on 
UFO's. That was pretty lame 

Jolt - Unknown 
■ 



Dear Blacklisted! 411, 

The guys on alt 2600 have been arguing about your 
magazine for a little while now. I don't what their problem is. 
I thought 2600 was pretty cool until I saw that bit from 
Emmanuel Goldstein I think you should send him some of 
your first volume copies. I think that would clear up some of 
the problems. Are you guys pissed off at him for spending all 
that time to make you guys look bad? Well, he wasn't very 
vicious but he didn't sound too happy about you guys. What 
are you going to do? I'm not sure what to think about this 
crap 

Unknown 

Hold on a sec. We wrote a small bit concerning this in the 
letter from the editor section Don't worry about Emmanuel. 
We hope to clear all of this up and be happy people, etc He's 
been a wonderful inspiration to many people over the years, 
us included He's really a very cool guy and this happens to 
be one of those times where life becomes a bit testing. And, 
no, we're not pissed off at him. He has the right to his 
viewpoint just like everyone else - we just hope we can clear 
this up before it gets out of hand 

Dear Blacklisted! 411, 

Ok. I've heard that you guys suck. I heard that your 
magazine was great! So, I decided to find out for myself. I 
looked around the local places where I find (ahem) 2600 but 
I could not find your magazine, so I faxed you (as you already 
know) and asked for information on your publication. I was 
very happy to find your information packet in my mailbox 2 
days later. Your little cover copy idea was cool. Anyhow, 
you've got a new reader. I like your magazine very much. 
Thanks for your time. 

Dazzle - Clearwater, FL 

Dear Blacklisted! 411, 

I never heard of your magazine before I happened to notice 
it recently while I was visiting a Tower Records in my area. I 
enjoyed reading it and had to say a few things. I like your info 
on the cellular phones and the questions and answers 
section. I found them useful. However, I did not like your 
UFO piece nor did I like the bit on the 5ESS. It was very 
confusing to say the least. While I'm on the topic of dislikes, 
I did not particularly like the BBS listing. Overall, I do like your 
magazine and I will probably purchase your next issue I 
wanted to give you a little feedback from a reader. Have a 
good one! 

Dragon - Provo, UT 

Dear Blacklisted! 411, 

I just wanted to say that I think your magazine sucks! 

Unknown 

Why is it that all the ones who think we suck won't say who 
they are? WHY does it suck? Elaborate. Maybe we can live 
up to your standards We need to know what areas to work 
on so we won't suck so much the next time you pick up a copy 
of our magazine! :) 

Dear Blacklisted! 411, 

Have you read all the talk about Blacklisted on alt.2600? It's 
way out of hand and many people are coming down on you 
for various reasons Most of them just say it sucks, with no 
elaboration. There's one guy who's making some decent 
points and another who's defending your magazine I don't 
want to join in on the fun on the internet, but I'd just like to say 
to you guys personally that I think you have a wonderful 
publication and I hope you don't decide to leave us in the 
dust. 2600 is a great magazine, but so is yours. I honestly 
hope that the two of you can exist peacefully. No need for any 
flame wars or such. We're all on the same side, you know. 
Great magazine! 

Avid Reader of Blacklisted - Mt. Laurel, NJ 
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UIIIPLE VOICE IHAIL hACCinG 

By: Lunatic Logic & D-CRyPT 



So you want an easy way to stay in touch? Tired of people calling you at all hours of the day? Astounded by the outrageous 
prices different services can charge? Well, then for these and many other reasons you NEED to read this article. Well, 
basically what this is about is how to hack voice-mail. Voice-mail is a very handy tool that can be used in many different ways. 
Voice-mail is a VERY SIMPLE operation that can be performed from a touch tone phone. Usually how this works is someone 
who wants to leave you a message or get in touch with you calls a number which is usually a 1-800 number, but there are 
some voice-mail boxes (VMB's) that have direct dial numbers. After the person calls the number, the person then dials in the 
voice-mail box number and is then able to leave a message in that slot. What happens is that when a person wants to get 
his/hers messages they just dial up the same 1-800 number and enters their voice-mail box number and then they enter their 
personal code (password, PIN, etc.). After this is done, they can do things such as changing their outgoing message, 
password, save messages, delete messages, forward their number, etc. If you think this sounds hard, well, it's not. It is a 
very simple process. One thing that makes this so simple is that there is voice prompting with many of these services which 
guides one along with everything you do and explains everything that is going on (prerecorded message, much like the newer 
digital all voice prompting answering machines). Oh, and you don't have to worry about the "voice" telling you something 
similar to "You are an unauthorized user and are being traced ...and we're coming to fry your ass!" In most cases (unless they 
are suspicious and are pulling a sting) they won't pull an ANI - you'll just get an error messages, instead. We will provide an 
example experience with a VMB number made up of variables (we're not giving out the numbers to any systems we know) 

1 We dial the number: Enter: 1 -800-XXX-XXXX 

2. We hear some type of message. It may present options or it may simply be a recording telling us to leave a message or 
to enter a VMB number. 

3. Now we usually have to hit a button like star or pound — but this is not always the case. Enter: (pound or star — # or * ) 
"Note - along the way you will most likely be presented options and instructions" 

4. We enter the number of the box we want to A) leave a message on, B) access. These number are usually three or four 
digits long. Enter: XXX 

5. Here is where the fun begins. Usually, here is where we would just leave a message for a person but instead we will do 
something else. Just do the same as above but when you hear the recorded message, enter: star(*) or pound (#) or whatever. 
You most likely will NOT be prompted during the recorded message about whether to hit star, pound or another button, but it 
is usually star or pound. Then it will ask you for your password. You then type what you believe the password is and then hit 
star (or whatever it tell you to hit). It will inform you if you guessed correctly or if you did not guess correctly. If you did 
correctly enter in the password, then you will be able to access all the normal capabilities of the VMB. 

6. From here on you will able to change the password, modify the outgoing message, etc. 

Password Guessing: To access a VMB you will need the password. There are a few basic techniques but nothing sure-fire. 
Sometimes the password will be a simple number like 1000, 2000, etc. Or it m,ay be the same as the box number. We 
suggest that you find a pattern on the VMB system to what the passwords are — maybe they all are three digits and begin with 
5, etc. Of course if you find yourself with an overwhelming amount of time, you can always resort to the good of brute force 
method. 

A few useful things we have found to do with VMB systems are: You can give a voice number that you can be reached at to 
complete strangers. You can be cooler than all your lame friends at school. "Note: We definitely DO NOT recommend giving 
your VMB # out to every punk you see on the street (including most of your classmates!)." This is for more than one reason. 
You might get a box flooded with prank messages left by some loser who had the time to flame your newly acquired mail box. 
Or it may be flooded by legit messages from people who want to reach you cause yer so cool <G>. Also, once your VMB # 
gets out, it will spread like wildfire! You want to impress a girl and give it to a few people at the mall. Next thing you know, 
your snotty little brother knows! Your whole school knows! Elvis knows, your mama and pops know, Connie Chung on the 
fuckin' 6 O'Ciock news knows and most importantly, the authorities know. Ma Bell, the police, your called principal and a 
number of other power figures now look on you in a different light. This is why we say that the worst mistake a VMB hacker 
makes is doing a little "spreading around" a.k.a. bragging a.k.a. "screwing of oneself." Also, everyone will want you to hack 
them up a spiffy new VMB. You get the point. 

Another use is setting up little "cheap" VMB services. Or if you have some type of small business, you can make it look all 
professional (which we know it's not) by having a VMB. We don't recommend this for any real business you might have 
because we doubt it will make you look very professional if it get's out that the VMB you were using was a hacked one. It's 
more life if you feel like dealing red boxes to the community or are selling some other type of illicit service. Or have a fun mail 
order system! 

There are too many reasons to describe, but we hope that you will be creative enough to come up with them. This is intended 
only as an introduction and basic summary of the wonderful world of VMB hacking. If your curiosity pulls you further, we 
suggest soaking up more specific information on different specifics. Suggested reading is: Phrack, Volume 2, Issue 1 1 , File 
A — Hacking Voice Mail Systems by Black Knight. This is available at the ftp site ftp.uu.net/doc/literary/obi/Phracks 

We hope that for all the people not familiar with VMB hacking this has served as an easy to understand intra into the basic 
techniques of VMB hacking. And for all you seasoned phreaks and hackers out there, this review of old news has perhaps 
provided new insight on old material. And if not, maybe it has been a fun read. HAPPY HAXHI! Lunatic Logic & D-CRyPT 

The staff here at Blacklisted! 411 would like to add a small bit of info to this, while we have the chance. Of course 
this is old news and such, we stilt have some comments for those who never knew about this or maybe never 
bothered with it Common passwords used on VMB systems are repeat numbers such as: 1111, 2222, 3333, 4444, 
etc.. Consecutive numbers such as: 1234, 2345, 3456, 4567, etc. Birthdates (in MMDDYY form) such as: 010178, 
030669, 122573, etc. We must mention that we have noted VMB "passwords" to be of any length from 4-16 digits 
long, although 4 and 6 digit passwords tend to be the most popular. 
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Dear Blacklisted 411, 

GTE Aircraft Telephones; Great and excellent magazine of 

yours. I do a lot of constant flying around the nation. Two 

years ago. someone lost a visa credit card in a parking lot 

near home. I picked it up and it has been my key to free 

phone calls frorf? any airborHe GTE pYione, ever since. Any 

old credit card works fine. Just don't give any key personal 

data over the pbane^ Good tjjk! ^ O n W rt 

U P) g X? V> O MfrOf** 

(D W O $ (D ft 3 (D 3 

Thanks for sharing ttirs Mfo with all of our reafihr£0WfrwoQ)d 

never suggest "cre&f cald &>ud asQ method cjrma^/n^~a 

phone call, as &ie qallrfcomd* ultirftately be^fraljecUo the 

originator by yray of fpe jjersor? called. p'Hej, dj? yojj 

remember who nallefd y<S) ot&uch anctsuch ? Chore nftght>8e 

a REWARD if ytiti dSn tSh uO." Any&w, the f&ea^&f MONB9 

can make anyone ^gJea/. f '8es/dej|, creditcacd fraucMs 

<ahem> illegal^fialia. nnyhpw yoi{2 heed g npr give my 

personal info cufjr /(re pftpn^js justifpd for a^pf i§e reasons 

stated above. V^g 1 H*W OinawarQ of the GffS ifyrcQ/r 

Telephones artd tfi&r ftorkmgs. (Hod to Wno© tH*8 in%, 

actually., thank&much. If y&i have iny otheSnf&to ^ub)mi, 

please do so, aweMd^Mtlejld bits of/nfo Hk&thiQf /peresf. 

ft (D 3 (t w rt trp g 

Blacklisted! 411 0) fa ft (D I— ' tQ H- 

I have been ha\tfng%oibWe Qsing tht) BBS rtdmtiBrs irt y&lir 

new issue. I was wondlirinQ if you Qftuld send m,e detailed 

info on using thSp. SinSreB N S H- • X" 

C H W rr Brad$. 

O 3 k! P (D rr ^ Pj 

We//, Brad.VWretgot sure exacf/0 WHATVyou're HavMg 

trouble with, p'&cisQly. ^lAre^ou coWpletelyRinfShilQf \Mih 

BBSing or are^ouljawpggouble Tpnnectinp ra a Jew of 

them? Anyhovfaif yjou'ye eyer madfya data<£al(j§efQfp, ge 

same measures^houldtbp f(jlowed here. Thejy'revBB^'s just 

like every other BBS. ydtit'veVtalled (lOyou've(call&8 ab~y, tftat 

is) Ok, assurrlthg Vbt/Ce never mOe a caW before thS&e 

numbers are us&d (8 place a. phone gall withtyou^corpbutsr, 

using your MOBEMJjf ygu p^ve on^Jto a rwjo^ computer 

somewhere efae V$u can rQd/write pytjlicfarivele 

messages, uplditi and dowMbad filefi(essenfJslly^copyinfbf 

files, more or iSks), etcfyit'sCquite fdri'for the^newtie^What 

you need to do's: locate softie typ&f fermffla/ s^ffvSrefeV 

your platform cpmputerMe: Aelix, Terminate or Tpjemate for 

k_. IBM - NComm, Jfaud Bandit&r JRCqppm for (he /fm/ga-i- $?? 

^for the Mac, etiH) OncetyofUget the terminadOsotBwai&i, r$tier 

fD to the help files to set tf&pr&ram uffoor your^noderrf^ Next, 

PJ make the call mth your mMem. . isa/f for t& cohnebt and 

^ away you go. XLst follow along withuhe prompts] that folj&w 

"*~bas been made. Ifffou need, specific help, 



Qj 



O (D 
C 3 
s^ble^^k 



Fydu explaifilhemv UevtrredJeaoer 
Hease Jae larger tM irPfuture 



(q please request&specifiQtoffli. 

o 2^2 

Blacklisted! 41 f? Jr" g 

[?■ In the movie, "V\[ar Games," lylatthev 

a telephone intO| giving him aJtee cal^vith a sodajejan(pull tab 
[3 & trick an electronic lock inJS opening with a tape recordar. 
ft) Are these plauslftle? Carfyc^ explaifijlhem? Devyteo^eaQei 
X in Cambrige, I^A. P" 
^issues. P. P. S. What's 

fQ i<; M ~ JJnknoflyn 

CD O H- w cn P 

IQ O/c, here we goCBy the&atf'we really do love thi&novie.. it's 

ft) one of our favorites ov& here.. All of the detailsffi the stuff 

' they do within that mowe may not be entirely s>rrecf, but 

[ when you overlook thq$e minor(HUGE) details^ it's a fun 

movie to watch. Anyhow, on to your questions. It is entirely 

possible to "fool" a payphone into giving you a free phone call 

- in essence, making the phone believe you inserted money 

when, in fact, you did not do so. The method Matthew used 

to achieve this is unknown. Apparently there has been many 

reports over the last decade that it IS possible, but */* have 

never been able to reproduce this feat, so I would have to say 

that we've not been able to do it, but it COULD be possible 
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with certain types of payphones, perhaps We cannot deny 
that possibility and say that it's completely impossible for such 
a thing to be done Hell, it's probably done every day out in 
BFE, USA somewhere and we know nothing about it 
(readers, if you DO know anything about this, feel free to say 
Something!!) 'file next question: * Matthe\ tricked an 
electronic lock into opening with a tape recorder Now, again, 
ihis is entirely possible (^/eif^he^nf&mationrwe hadraj tt>e 
Jtne ofzyat^ginQthe mqyie^Yqg cay clearly. "hear"0i thp 
*<tpovie tftat ttje /^/presses did, i&fa<£ creat§3a DTMH tc0e 
with eaifl pSih. A recording Qf tltese tones wSbld motf likely 
he reaaSjy acce&able into theinpiit Si the electronic Snitch 
tjiowever! iravasci very^cfude, tsftUDE example anathete 
i-^vas no^o/^o/tj/sed, ept.. £pyhT}w,\idoubt pery mupifi f*@/ 
EA/0R/4Q3k)Nd m usingbsuch-crSFfSp&ecuritfuiocks ds'th@r 
^detentidk(loSkedlhiore like 1 a medical Brtit) ce//ST Everfl&ingjie 
electronic ittbk wat we% worked Ath nevffi- EVEFLus&d 
YTMF topesQo werate fte sy/ttctyhg pif/on. hT&wever^ye j3p 
now th$fe exists switching d^t/ice^ tljgt DO use DTMF^tonas 
rjfover th^ pr&netftnes or&seiflArrt&teuTlradio aUto patents) to 
Sperafefl) G/'Ben We type^f switch use® in the movie (aV&TMF 
Q)peratid' sfoftcny it wasjiossibl&cQfick it Ss done^rn fM 
jpovie^owever^unlikely tha^thtdrearworld uses such loeds 
\jp locatiqps syeftys the one injhe mofle. Expfenation:t4p the 
Upovie, the S&itdp used DTMF (Qgal Wene, MsUti Freqtilen&yj 
'Jfones (such<$s UDe tones ma'Se w^iert^rou push keys 0*8 ydoi 
[elephofihj.Q ttfese tones, if+>tum? ooerate hSk switcrr. the 
$witch it£"Jisieniba" for f/iosaJongs.. when it hears the^pjoper 
sequence, //Lopegs up. Now^ sigpljHjecordipe these tones 
-would suffice^in fooling the s\^tch^ReTeord the tones and th@n 
jilay the~m 6&ckO. it'll be nearly the^ame as^keying in We 
Jones btViafe/. . . What's it. Trylhis® n5/ time jfflu make a cjj$ ^ 
Jfgure obj.awawjto RECORD^helones you'rethialing. Whpp * "JJ 
■$one, pt§y the tgpes into the^mqqth piece at^Jater time.\Jf 
zyou reowded tHfjm with any clarity and play ttiem back wfth 
little dis&rtieir and high enotitib aT2/io level, thS>call should foe 
i/aced&s ifyi>u Sst dialed it © hand^Pretty neat! haha. . T^js 
Is howjjgogje Med to (and^tilw>,^ctualm place redbox 
■pphone callS(Q T/gy record ttiQ coin insertion tones and thep 
play them bafle into the$)mb()th piece ofo a payphofte 
-tomewheretTAIMough man£ph61»e bprnpanies have caught 
^nto this ar 
\)FF until a 
ecorded /Qfles.|. Fun 



-p 



'into this a/SB 1 //3o longer wgp<£-as Sie mouthpiece is shht 

i'vbirns inserted, 9/ whicfrvme yco, CAN use me 

Fun! Doesn'\ always w^k, as there^s 

Iways somepne\ doing som&tping ne® to stop-^all fraud. <$k-, 

is for largertext in the future^ We'lltivork onttf.. We havedo 

^ram a LCW otfstuff on tne'se^patfas, larqer text woQd 

eriously cut inm the conten] quantify.. IVeJLsee abouf /?, 

y hough. AtgOlfioT is a Customer pwned go/n Operated 
r elephone. Q^itis, a payphone that you or I pf anyone dayi 
-purchase, pop onto a phoneWne-rand make (/money with it. . 

1 ^These phones can be found aS over @e state's). and they S?e 
"h O fv Q) *"Y T rt\ if) 

TOf operates, byAhe phone cbmuanles. . . They are pnvamy 

Ibwned and ffperpled. . . That's about it-Happy (Sacking! t^-j 

:> O ty H, 0) 

h»ear411, O in H- £ ft) •- H 

CWey, one qi£bk §Uestion: dotes 1 th|f phone company still have 
3ny REMOBP numbers in services £§eat magazine, keeajit 

bu P ! rr rtH-0 

) ft fcr PJ IQ £ Marinjo 

H> O m. X & P < 

REMOBS.ARe&iote Obser%ti6fo System - for those who 
"ion't know Be fQrnj. Well, now^JVe do not know of any still 
-in existence, actually. ..BUT, it isgptirejy possible that SOljIfE 
phone companies still have them0va^ble. With all the ESS 
upgrades and GTD software upgrades, it's most likely that 
most of the previously available remote observation system 
numbers are inactive or not "easily" access as they once 
were. I cannot vehfy or deny the existence of such numbers, 
since there are so many phone companies running under so 
many different switches, softwares, etc. I would like to say, 
though, that it's not unlikely they do not exist somewhere in 
the states or some other country Personally, it'd be nice to 
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have a few of them handy for a little eavesdropping, of 
course. For those readers who do not know what a REMOBS 
is - more or less, it's a system within a phone service which 
allows anyone possessing the proper access numbers (and 
codes, possibly) the ability of "listening in" on any subscribers 
phone line without the subscribers knowledge. The phone 
companies would like to deny that these ever existed, but the 
plain truth is that they did, and possibly STILL do. If you know 
anything about the up-to-date info on REMOBS, please feel 
free to advise us on it. We'd appreciate it very much. 

Dear 411, 

You guys have a great mag! Keep up the good work. I need 

info on ALL BOX'S . Red, blue, chrome, etc I need to 

know what they all do, and how to build them. And I also 
heard that the Radio Shack Auto Tone Dialer is great for 
hacking. What does it do? I'm new to all this stuff so any help 
is areat . Thanks again 

Ken 

Well, that's a tall order and, quite frankly, we cannot devote 
the space to completely explain how to build them, etc... so, 
we'll try to answer you the best we can, ok? The red box is 
the term used to describe a device which, when used 
correctly, will "fool" a payphone into thinking a person has 
inserted coins for a call when, in fact, there were NO coins 
inserted. You see, on phone company payphones, the 
phones themselves do NOT count the money or any such 
thing., what happens is that when a coin is inserted a tone is 
generated and sent to the main office for processing, then the 
main office sends a signal back to the phone, telling it if it can 
or cannot make a call, etc. This is, of course, all done 
automatically. Now, when a nickel is inserted, a short tone is 
generated... when a dime is inserted, two short tones are 

generated when a quarter is inserted, 5 short tones are 

generated... If these tones can be reproduced by some other 
method, it can be used to fake out the payphone into thinking 
it just gobbled up some coinage. Anyhow, it's the job of a 
redbox to reproduce these tones Most popular is 
reproducing the sound of the quarter insertion. There are 
many ways this can be done.. Anything from recording the 
sounds with a portable tape recording device and later playing 
it back into the mouthpiece of a payphone - to - making a 
completely devoted circuit who's sole purpose is to make the 
correct tones which imitate the proper coin insertion tones - to 
- refitting autodialers to work as call fraud devices. Anyhow, 
the simplest method was the last one mentioned. This is how 
it's done: Locate a Radio Shack pocket auto dialer. (This is 
also answering your question regarding the Radio Shack tone 
dialer, by the way) Next, locate a 6. 5536MHz crystal. Open 
up the tone dialer, replace the crystal inside with the new 
6.5536Mhz crystal (this will require soldering skills - minimal) 
Put it all back together. Program the autodialer with 5 it's 
(pounds) in one of the program keys. There you have it! A 
red box, sort of. It'll work for the most part. Be aware, though, 
that it's easy to spot these suckers over at the phone 
company. Why? The timing is not absolutely precise and the 
audio level "is* rather high - this can be remedied by placing 
a thin piece of paper over the speaker on the backside of the 
pocket autodialer or placing a resistor (unknown value) in 
series with the speaker to cut volume down a bit. This dialer 
will work on most of the GTE and PacBell payphones in the 
Southern California area. Also, a lot of the payphones have 
the mouthpiece turned "off' until a coin is inserted and the 
phone company can check, at any time, to see if there has 
been an actual physical coin dropped into it... so, it's a good 
idea to drop a nickel or something into the machine before red 
boxing, just for safe measure. 

Blue Boxes. . . This one is HUGE. More or less, they were used 
(and still are in some instances) to gain direct access into the 
telephone network, becoming an operator or sorts, allowing 
one to place calls anywhere, routing them just about any WAY 
they wanted to.. I won't get into describing this one, because 
there's just too much to cover right now, but we will print an 
article devoted to it, soon. I will say that it's damn hard to get 
away with trying to Blue Box, though. Don't even try it if 
you're unfamiliar with it. It's just a bad idea. Chrome boxes. 
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Ok, you know when an emergency vehicle (such as an 
ambulance or firetruck) has its lights flashing and its siren 
wailing as it goes down the street? Well, one of those many 
flashing lights is somewhat like a "strobe light" for the most 
part, and its job is to tell traffic signals to turn the light GREEN 
for them so they can pass through quickly. Some places use 
infrared signalling to control this "chrome box" phenomenon. 
We have traffic signal emergency vehicle detection devices 
located sporadically throughout our area. Apparently, there 
isn't any set standard for it around here. The chrome box 
receiving end can usually be found atop the center traffic 
signals. I have no specs on making a chrome box at this time, 
but I've heard that sometimes it's as simple as flashing your 
headlights a few times or purchasing a RadioShack strobe 
light (if they still sell them) and modifying it slightly - or not at 
all. Who knows.. There are many other "boxes" but these are 
the most common and the most popular. "Some' of the other 
"boxes" talked about over the years are nothing more than 
someone's imagination - and a terrible one, at that. Ok, if 
ANYONE has any specific info on chrome boxes or feels like 
handling an article on Blue Boxes for us, write us soon.. Oh, 
and if you've already submitted it to another magazine, let us 
know so we won't have to take a beating over it. Thanks. 

Hey 411, 

Why don't you run an article on computer viruses? Since 
much of the ignorant public is in an uproar about killer 
computer viruses, why don't you enlighten them on what they 

can/can't do. How they're made, etc Whatever. 

Meatcleaver 

You're right! Most of the unenlightened public is either 
scared to death of these "killer viruses" or has absolutely no 
clue about viruses until, one day, their hard drive is missing a 
few hundred megs of data, etc. We ran an article on them last 
year, but I suppose it's about time to run another to keep 
people up to date. We'll see what we can do.. Possibly listing 
the more popular (and maybe the more obscure) viruses and 
what they do, how to avoid them, recover from them, etc. We 
"will' run an up-to-date article on them soon. Thanks for the 
idea! (To all readers. Again, if you feel like writing on the 
topic, do it... and contact us! - thanks) 

Blacklisted 411, 

First, let me compliment you on your fine mag. My first issue 
is the April issue, found while out on routine book patrol. The 
cover, featuring a open access box, brought back some 
memories. A few years ago, I was Electrical Maintenance 
(drone)at a small college. Each dorm had such a access 
panel. Most were simply mounted on a piece of plywood on 
the wall of each dorm's mechanical room. None of them were 
locked, and a couple didn't even have doors! Cable 
distribution boxes were usually mounted on the same chunk 
of plywood. Those of you attending smaller, semi-rural 
colleges might want to investigate this. 
A couple of tired old hacks worth mentioning simply because 
they can be done cheap. Old TVs with channels 70-83 are in 
the 800Mhz range, and theoretically could be used with cell 
phones. I'd suggest using a broadband RF preamp with it. I 
live in a rural area(boonies)and my experiments with it turned 
up nada, but those of you in urban areas might want to try it. 
Little electronic "voice memo" units are available cheap at 
places like "Best Buys",and at some toy stores. These are 
more durable than the Hallmark card, and are ready to go. 
Instant red box.On the subject of red boxes, a co-worker some 
years ago(circa 1986) built one into a small boom 
box, equipping it with a reed switch to activate it (pass a 
magnet over the switch to activate) An invisible red box. Most 
boom boxes have plenty of empty space inside. 
ON chrome boxes. Does the traffic light sensor respond only 
to visible light? Xenon strobes are rich in W.and if the sensor 
can detect UV.why not put a photographic W filter over the 
strobe, rendering it "invisible"? It would seem to me that a 
plain old strobe would get noticed. 

Keep up the good work. It was worth the 45+mile drive to find 
your mag. From the boonies 

TVz Phrank. 
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Hello there, TVz Phrank. Thanks for your thoughts on the 
subjects mentioned. As you were saying about unlocked 
maintenance rooms/missing doors, etc. - this is not 
uncommon. You will find this in many apartment building 
complexes, large condo complexes, business areas, etc. Id 
say nearly 95% of the time, telephone access boxes are not 
secured in any way, just a snap and you're in. As for cable 
access boxes, if they are secured, it's not much to worry 
about. For instance, around our area, the cable company 
chose to use a "star key tool" to lock many of their boxes. 
BAD. They're simple to open, to say the least. They're locks 
are a dime a dozen and many people have gone so far as to 
cut a lock OFF a box, take the lock to a local locksmith, have 
a key made. etc.. etc.. you see the line of thinking. Anyhow, 
the whole concept of unsecured access boxes, whether it be 
telephone or cable, etc.. it's all too common. If anyone tries 
the UHF tuner cell phone trick and has any success, be sure 
to write in!! As for red boxes... We've seen them all It always 
amazes us how creative some people can be when making 
one of these babies! Haha - in a boom box? That's pretty 
slick, but I can only imagine cranking out coin insertion tones 
at 25watts per channel.. Must eat up the D-cells pretty fast, 
huh? Hahaha. I would think the friend who made the boom- 
red-box had some slick wired interface for the phone fraud 
action to be a little less noticeable? Like that idea! Chrome 
boxes. The traffic signal emergency vehicle detection 
devices that are sensitive to the strobe lights work on visible 
lights from what we know., this is why many people can 
simply flash their high beams a few times, activating the 
'chrome box" detection device. Although, we HAVE heard 
rumors that some of these are sensitive to UV, but we cannot 
confirm that either way. We do know, however, that a lot of 
the traffic signal emergency vehicle devices were made to 
respond to an infrared 'chrome box" source. This has been 
defeated by some simple means. First, locate a traffic signal 
which uses the infrared emergency vehicle detection circuit, 
(this might be hard, but if you just watch long enough, you can 
figure it out) Anyhow, once you've found one, wait for an 
emergency vehicle to near a signal sometime, but have a 
learning" remote control with you... set it to LEARN mode, 
choose the button you want the new infrared chrome box 
controller to be. ...wait., and, hopefully, you'll have it the first 
time. Now, when you're in a hurry, bring your TV remote 
along the drive... should make things a lot smoother. Have 
fun!! Also, thanks for the kind words. We're happy you don't 
mind making the long journey just for our publication!! 

Dear 411, 

Just happened along your zine recently and I wanted to toss 
a couple of questions your way 1 First question: I have an Oki 
900 and I would like to access the programming mode, but 
the default security code of "*12345678#" does not work. 
Apparently, the dealer I bought this from changed it to 
something else Can you help? Next question: I read a little 
bit about the cable service and the scrambling techniques, 
etc, in a previous issue. What:s the difference between a trap 
and a SSAVI"? That one threw me off Thanks for your help! 

Jason B. 

Ok, Jason... I think we can help you out. The default dealer 
security password for the Oki 900 is, in fact, '1 2345678$ .. 
you got that one right. Now, if it won't get you into the 
programming mode, try this one It's the master password for 
the Oki 900 cell phones '627298544 This is somewhat like a 
back door, more or less and it was built into the phone's 
firmware (it's always the same). Anyhow, once you use this, 
you can change the dealer password to anything you'd like. 
Pretty cool, huh? We love the Oki 900 over here., it can 
provide anyone with hours/days/months... years 7 worth of 
entertainment. You need to know the difference between a 
trap and SSA VI? First, a trap is NOT any type of scrambling. 
A trap is nothing more than a notch filter which is attached to 
a subscribers cable line and prevents a particular frequency 
(channel) from passing to your box, TV set. etc... Remove the 
trap, gain a new channel (most likely a PAY channel). Most 
systems are up-to-date and using complete scrambling 
method, which is what SSA VI will fall under SSA VI stands for 
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Sync Suppressed Active Video Inversion Boy, this is a really 
fun scrambling technique to mess with. The old Select TV 
(over the air on UHF channel 22) used this scrambling 
method MANY cable companies use this techniques. If you 
own a Zenith Z-Tac model, you've got an SSA VI system. The 
only way to defeat this is by descramblmg the incoming 
signal. This can be done in any one of numerous ways. The 
two most popular are: "Test chips" or "turn on kits" - this is a 
small chip with a few wires attached to it (normally) which is 
placed inside of a Zenith Z-Tac cable box (the kind the cable 
company supplies you with) and once soldered in correctly, 
the box is "turned ON" to receive ALL channels, whether you 
pay for them or not — even the pay per view channels. The 
test chips cost anywhere from $12 - $35 or so. (By the way, 
companies sell test chips for nearly every cable box made, so 
keep an eye open for them if you're interested in this sort of 
thing ) By the way, this is illegal, of course... The next 
method: Purchasing a descrambler. A Zenith Z-Tac 
descrambler goes for approximately $160 or so What one 
has to do is hook the cable line into a tuner (cable tuner or a 
VCR, etc), attach the descrambler's input to the output of the 
tuner, then the output of the descrambler to the input of a TV. 
The same results will follow. ALL channels... FREE.. Wow! 
Again, this is illegal. ..and, don't ask me why I'm even 
mentioning it. Habit? Perhaps it's just one of those days. 
Anyhow, again, these can be bought for just about any type 
of cable system. Zenith, Jerrold, Scientific Atlanta, etc Have 
a good time with your Oki 900... if you run into any probs, 
give us a yell! 

Dear Blacklisted!, 

I'm looking for more information on cellular telephones and 
such. Can you direct me to any cellular phone specific 
material I might be able to pick up? Thanks 

Ranger Joe 

Consumertronics, 2011 Cresent Drive, PO. Drawer 537, 
Alamogordo, NM 88310 (505)434-0234. Their latest catalog 
will cost ya $4. They have TONS of info! Also, you might 
want to check into back issues of Nuts & Volts Magazine. 
Damien Thorn has written excellent articles over the years 
pertaining to cellular phone technology. He has also written 
for, I believe, 2600 and is the newly appointed technical 
advisor of Private Line If you are unfamiliar with 2600 (which 
we highly doubt) here's the info you need: (btw, they are NOT 
strictly cell phone oriented, but they offer some great 
reading!) 2600 Hackers Quarterly, PO Box 752, Middle 
Island, NY 11953-0752 (516)751-2600 Subscnptions are 
$21/yr. Private Line (done by Tom Farley) is not cell phone 
specific, but it's also a wonderful resource. You can reach 
them at: Private Line, 5150 Fair Oaks Blvd. #101-348, 
Carmichael, CA 95608 (916)488-4231. Next, Spy Supply, 7 
Colby Court, Suite 215, Bedford, NH 03110. (617)327-7272 
Last, but not least: Telecode, P. Box 6426, Yuma, AZ 
85366-6426 (602)782-2316. ...They have TONS of info, like 
Consumertronics. Ok, that's all I have for you right now 
Hope that helps! 

Dear 411, 

I saw this message on a BBS a few days ago and I want your 

thoughts on it: 

Item: 1738 of subboard The Computer Center 
Subj: Warning! Warning 1 Dangerous Virus! 
From: Miles 
Date: Thu 25-May-1995 4:54p 



There is a computer virus that is being sent across the 
Internet. If you receive an e-mail message with the subject 
line "Good Times", DO NOT read the message, DELETE it 
immediately Please read the messages below. 

Some miscreant is sending e-mail under the title "good times" 
nation-wide If you get anything like this, DON'T DOWNLOAD 
THE FILE! It has a virus that rewrites your hard drive, 
obliterating anything on it Please be careful and forward this 
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mail to anyone you care about--l have Thought you might 
like to know... The FCC released a warning last Wednesday 
concerning a matter of major importance to any regular user 
of the Internet. Apparently, a new computer virus has been 
engineered by a user of America Online that is unparalleled in 
its destructive capability. Other, more well-known viruses 
such as Stoned, Airwolf, and Michaelangelo pale in 
comparison to the prospects of this newest creation by a 
warped mentality. What makes this virus so terrifying, said 
the FCC, is the fact that no program needs to be exchanged 
for a new computer to be infected. It can be spread through 
the existing e-mail systems of the Internet Once a computer 
is infected, one of several things can happen. If the computer 
contains a hard drive, that will most likely be destroyed. If the 
program is not stopped, the computer's processor will be 
placed in an nth-complexity infinite binary loop - which can 
severely damage the processor if left running that way too 
long. Unfortunately, most novice computer users will not 
realize what is happening until it is far too late. Luckily, there 
is one sure means of detecting what is now known as the 
"Good Times" virus. It always travels to new computers the 
same way in a text e-mail message with the subject line 
reading simply "Good Times". Avoiding infection is easy once 
the file has been received - not reading it. The act of loading 
the file into the mail server's ASCII buffer causes the "Good 
Times" mainline program to initialize and execute. The 
program is highly intelligent - it will send copies of itself to 
everyone whose e-mail address is contained in a received- 
mail file or a sent-mail file, if it can find one. It will then 
proceed to trash the computer it is running on The bottom 
line here is - if you receive a file with the subject line "Good 
Times", delete it immediately! Do not read it! Rest assured 
that whoever's name was on the "From:" line was surely 
struck by the virus. >>Warn your friends and local system 
users of this newest threat to the Internet! It could save them 
a lot of time and money. 

Chips 

First reaction: HAHAHHAHAHAHHAHAHHAHAHAHAHAHHA 
HAHAHHAHAHAHHAHAHAHHAHAHAHAHHAHAHHAHAHA 
HAHHAHHAHAHAHAHAHAHA!!!!! Ok, ok... enough with the 
laughing!! The facts as I know them: Both for and against, 
the killer Mail virus hoax.. . Against: One. MOST of your better 
Com. programs do not translate ANSI sequences outside of 
those that effect display (color, cursor position, and 
occasionally sound), they do not, for example, take the 
<ESC>["";"°p sequences that redefine keyboard strokes. 
(Procomm* f/windows)... However... this may not apply to 
some of the more primitive, ANSI driver dependent, Com. 
programs, (old Qmodem, old Telix, etc.) Two. MOST BBS 
mail systems DO NOT let you enter ANSI sequences directly 
(They will not accept ASCII code 27 witch is REQUIRED for 
ANY ANSI communication). Instead you are allowed to 
change the color of your text, etc., through special codes. 
Three. Mail Readers and ANSI art programs that translate 
ANSI usually only translate display sequences (as per the 
Com. programs above). But do not scoff so quickly as I did - 
as I thought about it some... For: If an ANSI document, such 
as ANSI artwork, were to be downloaded, unzipped, and 
viewed with the TYPE command, from DOS, with the 
ANSI. SYS resident, then yes, the computer would be 
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venerable to any instructions it received from the ANSI. 
However... The only way I could think of doing something 
destructive is as follows (and I am a little hesitant to make this 
public knowledge as it is too easy...). A key could be "re- 
programmed" to be a potential hazard to the system... For 
example: <ESC>[13;"DELTREE **/Y" A This code, when 
read by DOS's ANSI interpreter would replace the ENTER 
key with the command "DELTREE *.' /Y"<ENTER> in other 
words - it would delete masses of files on the Hard Drive 
(perhaps all of them, depending on the directory) the next 
time the ENTER key was pressed. "Format" or "CTTY" could 
be used for a more or less destructive "prank" I suppose. But 
I cannot think of a ANSI code that would allow the alterations 
needed to fry a cpu or actually do 'physical' damage to the 
Hard Drive. I do, however, know of some methods through 
witch that CAN be done (and no I will not put up details of 
them here). Setting/reassigning all your Interrupts to Zero 
tends to cause serious damage to the Hard Drive, there are 
various ways to fry Com. ports (heck, I know a crazy 
programer who went and did it on accident.) Most SVGA 
Cards can have the frequencies set wrong -making it appear 
as if your monitor has blown. In fact, if set just slightly off, it 
will eventually cause damage to the monitor (it MAY be 
possible to do that through ANSI depending on your card, and 
the code would vary with each card's special custom 
ANSI. SYS). If you had a CPU that had the potential to 
overheat (Say, Pentium90+) I suppose it wouldn't be too hard 
to "Overwork" the CPU, but such a virus would lock up your 
system - and most likely you would re-boot before your CPU 
went "critical", and of course there would be no way to do 
THAT with ANSI - you would actually have to RUN a 
corrupted program for any of these to work The Conclusion 
based on what I know: But again, extended ANSI codes only 
work with programs that translate ANSI through the 
ANSI. SYS and in a broad manner (Like DOS's Type 
Command). So most users are immune to this So if you are 
paranoid about ANSI codes re-writing your keyboards... Don't 
use the TYPE command with ANSI text files, and/or get a 
REAL Com. program. :) This "virus" is a hoax... To my 
knowledge, while that kind of damage CAN be done, it 
CANNOT be done through the reading of a text file. 

Dear Blacklisted! 411, 

I was having a conversation with some of my friends and the 
term "LINUX" came up... I was wondering if you can give me 
any insight as to what it is and/or what it does. 

PanHard 

LINUX is a public domain unix clone which is very powerful, 
can run X-windows and mostly anything else made for unix. It 
can handle 128megs of ram and 256megs of virtual memory 
and it can be used on a local area net. You can download it 
from the internet for FREE... try sunsite unc.edu for the Linux 
Installation, Getting Started, and Linux itself... The creator of 
Linux, (well, head of the team) is Linus Torvalds internet 
address: torvalds@cs.helsinki.fi If you don't have an internet 
account, it's about time you get one! 

Dear 411, 

I just wanted to compliment you for running a great magazine 

I thought that your answers to the guy who was still using a 
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Commodore 64 home computer were right on the nose and it 
was nice of you to refer to the machine as you did. I get sick 
of people talking down on the Commodore 64 all the time. As 
you know, it was (and still is) a great little machine and does 
a lot for such a small (and OLD) piece of work. I was 
wondering if you could print a little more on the Amiga line of 
computers because I recently purchased a used Amiga 2000 
and I would like to know more about it, how I can use it, what 
software I should use with it, etc. Thanks for a great mag! 

Hawkeye 

Hey Hawkeye, you wanted it (and so did a LOT of others, 
actually), so you (all) got it! We've now got a small section in 
the magazine which talks a little more about the Amiga line of 
computers.. We will, in future issues, be dealing more with the 
hardware hacks and such and how you can use it in a manner 
which follows with the basic idea behind the magazine 
(hacking) more or less We've got "Major Coyote" heading 
the Amiga Dept. here, now so things should run smoothly. He 
wrote a little bit on the history of Commodore, etc and where 
it is right now... With the auction and such. Thanks for your 
interest in the growth of the magazine, Hawkeye.. (and all the 
hundreds of other people asking for the same thing!!) 

Dear 411, 

I live near your headquarters (office) and I fall within the 
<ahem> Paragon cable service area I was curious to know 
what the termination "terminator" tool looks like and how it 
works. Also, can you tell me where I can find one and how 
much it will cost me? 

Brainstorm 

Take a look on page 58. We've got a picture of the tool you're 
talking about and some " how-it-works" text to go along with it. 
We don't know, right off hand, where you can purchase one 
of these, but maybe one of the readers might know. So 
readers. ..what is it? Do you know where this guy can find 
some cable security tools? Hell, while you're at it, do any of 
you know where SCE power meter security retainer ring tools 
may be purchased? Thanks. . . remember, look on page 58. 

Dear Blacklisted' 411, 

I've been reading your magazine since it's first issue and I 
think you guys have been doing a great job' I had a question 
about your last issue and a request for the next issue. Where 
exactly are those "chrome" boxes used and how do they 
work? Can you include a list of some New Jersey BBSs in 
the next issue? Thanks 

RatBoy 

Well, Ratboy, the chrome boxes ARE used through the 
southern California area we KNOW this What we cannot 
tell you is where they are used anywhere other than this. We 
would think they're used throughout the states, but you know 
how that works Because we can find it in one place gives us 
no reason to think we can find it in another place especially 
here in the United States . hah.. Anyhow, we've heard that 
they are used in Texas but, again, we don't know this for a 
fact. If any of the readers have any comments on the areas 
where chrome boxes are used, please speak up! How they 
work. The traffic signal has an "emergency vehicle detection" 
device It waits for an emergency vehicle to come by, 
switches the light to GREEN for them to pass and then returns 
to normal operation once the vehicle has passed. All it uses 
to determine whether or not an emergency vehicle is neanng 
is by the use of light. Whether it's visible light or infrared. The 
one which uses visible light can sometimes be tricked with 
something as simple as flashing your high beams at them a 
few times or with a strobe light! The infrared one is a little 
tougher. It still uses a light signal to set it off, but this time it's 
"invisible" more or less.. The use of a universal remote can 
take care of this.. Put it into LEARN mode when a emergency 
vehicle is nearing an intersection and, hopefully, if they are 
using infrared, you'll have it programmed in your remote in no 
time at all! You wanted some New Jersey BBS numbers? 
You got them, bud! Take a look on page 19 Enjoy! 
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Dear 411, 

I know that you've probably heard this a million times, but I 
wanted to know how to make a redbox and how much it'll cost 
me. Thanks for having such a cool mag! 

Budd 

Yes, we've heard the same question a LOT, but that's ok. 
We'll still answer you. Why? Because that's what we do!! 
haha Ok, simplest way a redbox has been made is using the 
radio shack pocket auto tone dialer. First, buy a radio shack 
programmable pocket auto tone dialer. Will cost you 
somewhere in the region of S20-S25 or so. Next, buy a 
6.5536MHz crystal. It'll cost you somewhere from $2-$10. 
Once you have both items, open up tone dialer (soldering 
skills are a must!) take the crystal OUT of the autodialer and 
replace it with the one you bought. There's no need to worry 
about which way it goes in. . just make sure you replace it. Put 
the auto dialer back together. Program 5 #'s (pounds) into 
one of the program areas (refer to auto dialer manual for 
programming information) There you have it. A red box! So, 
it'll cost you between S22-S35.. Have fun. 

Dear 411, 

Hello guys. I need to know where I can find those 6.5mhz 
crystals everyone is always talking about Can you help me? 

Skylark 

On page 35 there's a company by the name of "PVS" selling 
them for $4. Give them a call. They can be bought from Fry's 
Electronics in Fountain Valley and from Digikey. Hope that 
helps you. 

Dear Blacklisted! 

I have an old Commodore 64 that I still use and I was 
wondering if there is anything I can use with it to learn a little 
more about hacking, phreaking and such. I am new to all of 
this, so please try to keep it simple like you usually do. By the 
way, I really do like your magazine. You guys are doing a 
great job 1 

PolarSwirl 

You're in luck. A lot of us started out on Commodore 64's so 
we know of many things you can do with it. The only thing I 
will talk about this time around will be a program called 
"Phone Man" (I believe that's what it was called - it's been a 
LONG time) Anyhow, this cool little program has all sorts of 
stuff that's cool to play with.. It has a redbox tone generator, 
a green box tone generator, silver box, blue box, etc. Plus, 
it's a terminal software as well. Believe it or not, recording 
those little red box tones and playing them back into a 
pay phone is what got a LOT of kids started in the wonderful 
world of hacking. Phone Man is a very OLD program and I do 
not know what the last release version of it was, but it will 
always remain in my mind that I had a good time playing with 
that program. There are many other programs you can use 
and a lot of little hacks you can make to do just about anything 
you can dream up Locate that program, play with it for awhile 
and then get back to us. Have fun and hope you CAN locate 
the program. 

Dear Blacklisted!, 

I need some help with my caller ID box I bought it recently 
and hooked it up alright The problem is that I never get any 
info on it. The phone rings and the box sits there with no info 
on it at all. Am I doing something wrong? I figured you guys 
could help me out with this one. 

Dark Gender 

Well, we need some more information. You gave us no 
city/state information in your email. That probably would have 
made this answer a lot easier on us. Ok, if you're living in a 
state where caller ID is active, either the device you bought is 
faulty, the connection you made to the device was done 
incorrectly OR every person calling you has their caller ID 
blocked (which can be done in some states - not all). 
Investigate all of those areas if you do live in a state where 
caller ID is available Check with your local phone company 
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if you are unsure about this one. If you are living in a state 
where caller ID is unavailable, well., there you go., that's 
why it's not working, most likely. Again, check with your 
local phone company to make SURE you do have caller ID 
available in your area. California, for instance, has NO caller 
ID service available, however, it's been said by many 
sources that it is, in fact, active, but the frequency the data 
is sent on has been "shifted" a little bit, rendering all caller ID 
equipment inoperative. That one would be possible to get 
around if it's true. Anyhow, check with the phone company 
and then, if you do have caller ID service, check the device 
and/or the connection you made. That's all. 

Dear Blacklisted! 411, 

I've been an avid reader of your publication since Volume 1 , 
Issue 3 (March 1994) I wanted to first tell you that I enjoy 
your publication very much and I hope your continued 
success You have great material, as well! I would like to 
ask a question and, if you feel it's worthy of an answer, 
please print it in the next possible issue. Thank you in 
advance Ok, here goes. I recently had my cable TV 
disconnected. I thought the price was too high for the 
terrible service I was getting. When the cable man came by 
to disconnect my service, I watched him closely. He climbed 
up the pole in the backyard and within a few minutes I had 
no more cable TV What I wanted to know was this. All they 
do is pull a wire to disconnect cable? And, if so, can't 
someone just plug it back in? For FREE? It would seem so 
from what I observed. 

Curious 

Yep! That's all they do in some places. It's very simple to 
go up there and reconnect your cable. The only thing that 
one must have is a termination tool to remove the security 
terminator from the distribution port atop the utility pole. 
Without that tool, it's nearly impossible to hook the wire back 
into anything at all. But, yes, your idea is right. Plug it back 
in and you have cable. In some areas, though, plugging it in 
won't be enough. For instance, if you have a completely 
scrambled cable system, once you hooked it back up, you'd 
just get a bunch of garbage on the screen when you try to 
view it. So, sometimes you'll end up having to purchase a 
descrambler so you can view any of the stations, or just the 
PAY channels. Either way, it'll cost you a little time and a 
little money to hook it up for "free".... so, in a sense, it's not 
so free. :) If you have any more questions, toss them our 
way! 
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POWER Meters! 




Slowly, it turns.. Slowly, your wallet empties! 

Gee, what a concept!! If any of you are like the 41 1 staff, you know what it's like having HUGE electric bills 

I at the end of the month! 
Why, just last month, we 
had an enormous bill to 
choke on! Somewhere to 
the tune of $1100. Of 
course, that was due to a 
few unpaid months and 
such, (hahaha) But, 
| usually the monthly cut 
for the electric company 
(SCE) ends up 

somewhere in the 
neighborhood of $200 or 
so. I suppose it's not that 
much, really. ..But, for 
one year of service at this 
rate, we're looking at a 
total of nearly $2400. 
With that kind of money, 
| we could do some pretty 

cool things other than watching our money dwindle away into air, seemingly. Some people are so tired of 
paying for what were so used to paying for, that they've resorted to theft of electricity - theft of utility service. 
Of course, the fines and threats for doing such a horrible thing (haha) are large and scary, but people still do 
it.. Why? Well, quite frankly, because it's EASY and they CAN!! - and, on top of that, they can do it with little 
worry of ever getting in trouble for it. It is the utilities responsibility to PROVE that the subscriber has willfully 
engaged in theft of their service - which is very difficult to prove, even if there is a bogus job done on the power 
meter, etc.. hell, not even some fingerprints would be enough to incriminate the subscriber. Funny, huh? Now, 
we're not saying for any of you to go out and try to steal anything, but we ARE saying that people do it on a 
daily basis and never feel any repercussions in doing so. How they do they do it? There are many ways to 
steal electricity. First, the only way the power companies can tell how much electricity any given subscriber 
has used is by that little power meter located right outside of the subscribers residence (or place of business). 
So, if the power meter is tweaked or bypassed, etc.. it's hard to tell that anything is going on. It's nothing like 
stealing phone service There's no way the office can really pinpoint how much YOU are using from the 
confines of their office - they have to send someone out to your place to read the meter and get the info back 
to the office as soon as possible. Some of these meters have evolved into some nice pieces of work, actually. 
Some of them are electronic and the meter reader dude simply passes a little wand (more or less) over it and 
the info is passed to his little storage device instantaneously. Pretty cool. We don't have the pictures ready 
at the moment, so we cannot show you the inside of the meter, pointing out each piece and what it does and 
how you can use that info to your advantage. So, we will give you a little info about them and you can use 
that as you please. Bypassing a meter can be done two ways. ...The first way would be done by hooking up 
your electrical load to a point on the incoming line BEFORE it reaches the meter, as if you hook it up after the 
meter, you've accomplished no feat of theft. Be careful with this one... that electricity is pretty juicy and it's just 
waiting to fry someone not observing proper safety precautions. BE CAREFUL. Anyhow, the next method of 
bypassing is done by altering the meter itself. On some of the meters, there's a "switch" that essentially turns 
the meter OFF, thereby allowing you to bypass it completely. This "switch" is nothing more than a small piece 
of metal located on the backside(where the terminals are located) of the meter and it's held in place with two 
screws Shut the circuit breaker OFF, remove the meter, locate the "switch", loosen the screws, slide the 
metal piece so it is NOT touch both screws, then tighten the screws again, replace the meter and switch the 
circuit breaker back on. Voila! The meter is now off and no electricity consumption will be recorded by the 
metering device. The way the meter works is very simple. The switch mentioned is what controls power to 
the "stationary coil" (dunno what to call it, precisely). This coil is always on and provides a stable magnetic 
field for the "spinning platform". Now, the two input terminals (the TOP terminals on the backside) make their 
way into the metering device through very thick metal bars... these bars are then turned a couple of times 
underneath the "spinning platform", making a coil, in essence, that opposes the stationary coil. This is the coil 
which increases/decreases it's magnetic field in relation to the energy usage The more juice you pull through 
it, the larger the magnetic field, the faster the platform spins around. ...the more money you spend! Cut off the 
top stationary coil, the meter is dead and will not register ANY energy consumption, at all. In the next issue, 
we'll talk about some interesting theft ideas we've seen and how they are used. It should be fun. 
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This is the continuation of our technical support BBS listing from the last issue. This is only a 
listing of companies starting with D-Q, but it will be completed with the next issue! Needless 
to say, you will find on the following pages, a few useful tech. support BBS numbers listed. 
Our entire compilation of these support BBS's is quite large. This is why we've decided to 
break it up over a few issues. Due to the fact that there are very many systems listed, we have 
not verified the existence of every single one of these systems. If you find any error in number 
or name on any system listed, please feel free to contact us regarding this. Mail, Fax or Phone 
in any additions, corrections or deletions to this listing. We do not, in any way, take 
responsibility for any resulting actions arising from the use of the systems listed. This listing 
is provided for information purposes only. 

Technical Support BBS List (D-Q) 

DAC Software TX 214-931-6617 24 DAC EASY ACCOUNTING 

DAK Online Resource Center. CA 818-715-7153 144 ALL DAK PRODUCTS 
Dariana Technology Group... CA 714-994-7410 24 SYSTEM SLEUTH 

Darwin Systems DC 301-251-9206 144 DARWIN BBS LIST 

Data Access FL 305-238-0640 24 DATAFLEX 

Datadesk/Prometheus OR 503-691-5199 96 KEYBOARDS/TRACKBALLS 

DataEase Int'l CT 203-374-6302 24 DATAEASE.GRAFTALK 

Dataproducts Corp CA 818-887-8167 96 DATAPRODUCTS PRINTERS 

Datastorm MO 314-875-0503 144 PROCOMM PLUS 

DataWatch NC 919-491-1602 144 CITADEL.SCREENTALK.VITEX 

Data Technology CA 408-942-4010 24 HD CONTROLLERS 

David Systems CA 408-720-0406 24 NETWORKING HARDWARE 

Dayna Communications UT 801-268-7389 24 LOCALTALK.E-NET FOR MAC 

DCA GA 404-740-8428 96 CROSSTALK/IRMA 

DEC PC Support GA 508-496-8800 144 DEC COMPUTERS 

Dell Computer Corp TX 512-338-8528 144 DELL MAIL ORDER CLONES 

Delphi CA 800-365-4636 24 DELPHI ONLINE SERVICE 

Delrina Technology Inc ON 416-441-2752 168 FAX & FORMS SOFTWARE 

DeltaComm Development NC 919-481-9399 168 TELIX COMM SOFTWARE 

Describe CA 916-929-3237 144 DESCRIBE WORD PROCESSOR 

Diagnostic Technologies... ON 905-607-6570 144 DIAGS & SCHEMATICS 

DiagSoft CA 408-438-8997 96 QAPLUS, PEACE OF MIND 

Diamond Computer CA 408-524-9301 144 VIDEO BOARDS 

Digiboard MN 612-943-0812 96 INTELLIGENT SERIAL CARD 

Digital Communications OH 513-433-5080 24 10-NET 

Digital Research CA 408-649-3443 24 DR DOS 

Digital Theatre GA 404-446-0485 24 CDROM M/MEDIA APPS 

Digital Vision MA 617-329-8387 144 VIDEO IMAGING 

Disk Technician Corporation CA 61 9-272-9240 24 DISK TECHNICIAN GOLD 

Disney Software CA 818-567-4027 144 KIDS SOFTWARE 

Distibuted Processing Tech. FL 407-831 -6432 24 CONTROLLER CARDS 

D-Link Systems, Inc CA 714-455-1779 144 NETWORK PRINT SERVER 

DNA Networks, Inc PA 215-296-9558 24 MICRONET NETWORK 

Dove Computer NC 919-343-5616 144 MODEMS/FAX BOARDS 

DSP Solutions CA 415-494-1621 144 PORTABLE SOUND+ / SHOW&TELL 

DTK Computer Inc Of Texas TX 7 1 3-568-9941 96 MOTHERBOARDS/ I/O CARDS 

Dudley Software TN 615-966-3574 24 DOORWAY SOFTWARE 

Dynamic Microprocessor NY 516-462-6638 24 COMPUTER CPUS 

E-Machines CA 408-541-6190 144 MONITORS.VIDEO HARDWARE 

Eagle Technology CA 408-453-0734 96 NETWORK PRODUCTS 

EagleSoft IN 812-479-1310 168 SHOPPERS ASST.CALLAWAY 

EDS. Development IN 812-423-3394 144 EDS SOFTWARE PROGRAMS 

Elan Software CA 310-459-3443 144 GOLDMINE SOFTWARE 

Elite Business App's MD 410-987-2335 24 RAMJET 

Emac/Everex CA 510-226-9694 144 TRACKBALL, MODEM 

Emerald Systems CA 619-673-4617 24 DATA MANAGEMENT 

Enable Software NY 518-877-6316 24 ENABLE BUSINESS SOFTWARE 

Envisio MN 612-633-0051 96 MACINTOSH STORAGE UNITS 

Epson America, Inc CA 31 0-782-4531 144 EPSON COMPUTER PRODUCTS 

Equinox Systems, Inc FL 305-791-1633 96 MULTIPORT COMM PORTS 

eSoft Inc CO 303-699-8222 168 TBBS BBS SOFTWARE 

ETS Incorporated UT 801-265-0919 144 GUI & LASER PRINTER APPS 

Excalibur C A 408-244-0813 144 VSUMX VIRUS SOFTWARE 

EZX Publishing TX 713-280-8180 144 EZ-FORM, EZ-DISKCOPY 

Family Scrapbook FL 904-249-9515 168 FAMILY SCRAPBOOK 

Lend out this copy of Blacklisted! 411 and you'll probably never see it again!! 
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POLICE RADIO CODES 

THE FOLLOWING IS A COMBINED LIST 
OF THOSE RADIO CODES USED BY 
THE MAJORITY OF THE POLICE 
DEPARTMENTS IN THE SAN 
FRANCISCO BAY AREA. EACH 

AGENCY ALSO HAS CODES THAT ARE 
UNIQUE TO THAT AGENCY'S 
PARTICULAR TASK. 

10-00 CODES 

1 0-0 EXERCISE GREAT CAUTION 

10-1 RECEPTION IS POOR 

10-2 RECEPTION IS GOOD 

10-3 STOP TRANSMITTING 

10-4 MESSAGE RECEIVED 

10-5 RELAY MESSAGE 

10-6 CHANGE CHANNEL 

10-7 OUT OF SERVICE/UNAVAILABLE 

FOR ASSIGNMENT 

10-7A OUT OF SERVICE AT HOME 

1 0-7B OUT OF SERVICE - PERSONAL 

10-8 IN 'SERVICE/AVAILABLE FOR 

ASSIGNMENT 

10-9 REPEAT LAST TRANSMISSION 

10-10 OFF DUTY 

10-10A OFF DUTY AT HOME 

10-11 IDENTIFY THIS FREQUENCY 

10-12 VISITORS ARE PRESENT (BE 

DISCRETE). 

10-13 ADVISE WEATHER AND ROAD 

CONDITIONS 

10-14 CITIZEN HOLDING SUSPECT 

10-15 PRISONER IN CUSTODY 

10-16 PICK UP PRISONER 

10-17 REQUEST FOR GASOLINE 

10-18 EQUIPMENT EXCHANGE 

10-19 RETURN/RETURNING TO THE 

STATION 

10-20 LOCATION? 

10-21 TELEPHONE 

10-21A ADVISE HOME THAT I WILL 

RETURN AT 

10-22 DISREGARD THE LAST 

ASSIGNMENT 

10-22C LEAVE AREA IF ALL SECURE: 

NO RESPONSIBLE PERSON/OWNER IS 

ENROUTE 

10-23 STANDBY 

10-24 REQUEST CAR-TO-CAR 

TRANSMISSION 

10-25 DO YOU HAVE CONTACT WITH 

•> 

10-26 CLEAR 

10-27 DRIVER'S LICENSE CHECK 

10-28 VEHICLE REGISTRATION 

REQUEST 

10-29 CHECK FOR BEING 

WANTED/WARRANTS 

10-29F THE SUBJECT IS WANTED FOR 

A FELONY 

10-29H CAUTION - SEVERE HAZARD 

POTENTIAL 

10-29M THE SUBJECT IS WANTED 



Farallon Computing CA 51 0-865-1 321 144 NETWORKING PRODUCTS 

Fifth Generation Systems LA 504-295-3344 24 FASTBACKLONDON BRIDGE 

Folio UT 801-375-9907 24 MAILBAG 

Foresight Resources MO 816-891-8465 24 DRAFIX CADD SOFTWARE 

Frederick Engineering. Inc. MD 301 -290-6944 24 DATACOMM ANALYZER 

Fresh Technology AZ 602-497-4235 24 MAP ASSIST, NETWORK SFTW 

Future Domain CA 714-253-0432 24 TAPE BACKUPS 

FutureSoft Engineering TX 713-588-6870 24 DYNACOMM 

Galacticomm FL 305-583-7808 144 MAJOR BBS SOFTWARE 

GammaLink CA 408-745-2216 144 GAMMAFAX/ADDON BOARDS 

GAP Development Company... CA 714-493-3819 144 GAP BBS SOFTWARE 

Gateway BBS SD 605-232-2109 144 GATEWAY COMPUTERS 

Gateway Communications CA 714-863-7097 24 NETWORK HARDWARE 

Gazelle Systems UT 801-375-2548 24 BACKIT,OPTUNE,Q-DOS 

GEcho KS 316-263-5313 168 FIDO MAIL PROCESSOR 

General DataComm Ind CT 203-598-0593 144 MODEM/MULTIPLEXORS/LAN 

GEnie Information Services. CA 800-638-8369 24 GENIE ONLINE SERVICE 

Genicom VA 703-949-1576 144 PRINTERS & HARDWARE 

Genoa Systems CA 408-943-1 231 24 TAPE BACKUPS 

Gensoft Development WA 206-562-9407 24 SUPERCALC 

GeoWorks CA 510-549-1884 96 GEOWORKS 

GeoClock VA 703-241-7980 144 GEOCLOCK SOFTWARE 

Gibson Research CA 714-362-8848 96 SPINRITE 

GigaTrend, Inc CA 619-931-9469 96 HIGH CAPACITY HARD DRIVE 

Global Village Comm CA 41 5-390-8334 144 TELEPORT.POWERPORT 

GoldDisk ON 416-602-7534 24 ANIM. WORKS, VIDEO DIR. 

Goldstar Technologies CA 408-432-0236 144 MONITORS & COMPUTERS 

Graphic Workshop ON 416-729-4609 144 GRAPHIC WORKSHOP PRG 

Great American Software .... NH 603-889-7292 24 ONE-WRITE PLUS ACCNT 
Gupta Technologies, Inc .... CA 415-617-4700 144 SQLWINDOWS 

GVC Technologies NJ 201-579-2380 144 MODEMS 

Hayes Microcomputer GA 800-874-2937 288 D MODEMS 

Hayes Microcomputer GA 404-446-6336 288 MODEMS 

Hazard Soft OK 405-243-3200 168 WINDOWS SOFTWARE 

HDC Computer WA 206-869-2418 24 WINDOWS ENV SOFTWARE 

Helic Software IL 718-392-4054 144 NETROOM SOFTWARE 

Hercules Computer CA 510-623-7449 144 MEMORY EXP. VIDEO CARDS 

Hyundai Electronics Amer CA 800-955-5432 144 MONITORS 

:BM NC 919-517-0001 144 IBM COMPUTER PRODUCTS 

IBM Antivirus Netherlands.. NE+31 -79-223300 168 IBM ANTIVIRUS 
Intelligent Graphics Corp.. CA 408-441-0386 24 VM386, MULTITASKING 

MC Networks CA 714-724-0930 24 LAN NETWORK EQUIPMENT 

iMSI Software CA 415-454-2893 24 DESKTOP PUBLISHING 

Infinity Computer Services PA 215-965-8028 24 BAR CODE PRODUCTS 

infochip Systems CA 408-727-2496 24 MEMORY 

Informix MO 913-492-2089 24 SMARTWARE. INFORMIX 

infoShare DC 703-803-8000 96H FALKEN BBS SOFTWARE 

Innovative Data Concepts... PA 215-357-4183 24 TCXL 

Inset Corporation CT 203-740-0063 144 HIJAAK GRAPHIC CONVERSN 

insignia Solutions CA 415-694-7694 24 ACCESS PC, SOFT PC 

Intel OR 503-645-6275 144 MATHCO, MODEM, FAX.CHIPS 

Intel Application Support . CA 916-356-3600 144 INTEL MOTHERBOARDS 

InterPlay Productions CA 714-252-2822 144 ENTERTAINMENT SOFTWARE 

intracorp FL 305-378-8793 24 TRAVEL PARTNET 

Iomega UT 801-778-4400 24 TAPE BACKUPS 

IQ Software WA 206-821-5486 144 LAN & MULTIUSER BOARDS 

Irwin Magnetics FL 407-263-3662 96 TAPE BACKUPS 

Jetfax CA 415-324-1259 24 JETFAX BOARDS 

Jetform ON 613-563-2894 24 JETFORM DESIGN 

JDR Microdevices CA 408-559-0253 24 MAIL ORDER COMPONETS 

Kent Marsh TX 713-522-8921 24 MAC SECURITY SOFTWARE 

Kenwood Italy IT 39-229516558 144 KENWOOD AMATUER RADIO 

Keyfile NH 603-883-5968 24 KEYFILE SOFTWARE 

Kingston Technology CA 714-435-2636 24 MEMORY PRODUCTS 

Knowledge Adventure CA 818-248-0166 144 EDUCATIONAL SOFTWARE 

Kodiak Technology CA 510-659-0857 96 NETWORK HARDWARE 

KurtaCorp AZ 602-243-9440 24 DIGITIZER BOARDS 

LAN Master TX 817-771-0233 168 REMOTE ACCESS SOFTWARE 

LAN Systems UT 801-373-6980 24 NETWORKING HARDWARE 

LAN Works ON 416-238-0253 24 PROMS 

Laser Go CA 619-450-9370 24 GOSCRIPT 

Laser Master MN 612-835-5463 144 LASER PRINTER SOFTWARE 

Lattice IL 708-916-1200 24 LATTICE SOFTWARE 

Leading Edge MA 508-836-3971 144 COMPUTER SYSTEMS 

Lexmark KY 606-232-5238 24 PRINTERS, KEYBOARDS 

Liant Software WA 206-236-6485 24 LANGUAGE SOFTWARE 

Lightning Communications . CA 714-457-9429 96 COMMUNICATIONS SOFTWARE 
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FOR A MISDEMEANOR 


10-29V 


THE VEHICLE IS WANTED IN 1 


CONNECTION WITH A POSSIBLE | 


CRIME 




10-30 


DOES NOT CONFORM TO 1 


REGULATIONS 


10-32 


DROWNING. 


10-33 


ALARM SOUNDING. 


10-34 


ASSIST AT OFFICE. 


10-35 


TIME CHECK. 


10-36 CONFIDENTIAL INFO. 


10-37 


IDENTIFY THE OPERATOR. 


10-39 


CAN COME TO THE 1 


RADIO' 




10-40 


IS AVAILABLE FOR A 1 


TELEPHONE CALL? 


10-42 


CHECK ON THE WELFARE 1 


OF/AT 


■ 


10-43 


CALL A DOCTOR 


10-45 


WHAT IS THE CONDITION OF 1 


THE PATIENT? 


10-45A 


CONDITION OF PATIENT IS 1 


GOOD. 




10-45B 


CONDITION OF PATIENT IS 1 


SERIOUS 


10-45C 


CONDITION OF PATIENT IS 1 


CRITICAL 


10-45D 


PATIENT IS DECEASED. 


10-49 


PROCEED TO . 


10-50 


SUBJECT IS UNDER THE 1 


INFLUENCE OF NARCOTICS. 


10-51 


SUBJECT IS DRUNK 


10-52 


RESUSCITATOR IS NEEDED 


10-53 


MAN DOWN 


10-54 


POSSIBLE DEAD BODY. 


10-55 


THIS IS A CORONER'S CASE 


10-56 


SUICIDE 


10-56A 


SUICIDE ATTEMPT. 


10-57 


MISSING PERSON 


10-59 


SECURITY CHECK. 


10-60 


LOCK OUT 


10-61 


MISCELLANEOUS PUBLIC 


SERVICE 


10-62 


MEET A CITIZEN 


10-62A 


TAKE A REPORT FROM A 1 


CITIZEN 


10-62B 


CIVIL STANDBY. 


10-63 


PREPARE TO COPY. 


10-64 


FOUND PROPERTY. 


10-66 


SUSPICIOUS PERSON. 


10-67 


PERSON CALLING FOR HELP. 


10-68 


CALL FOR POLICE MADE VIA 


TELEPHONE 


10-70 


PROWLER. 


10-71 


SHOOTING. 


10-72 


GUN INVOLVED. 


10-73 


HOW DO YOU RECEIVE? 


10-79 


BOMB THREAT. 


10-80 


EXPLOSION. 


10-86 


ANY TRAFFIC? 


10-88 


ASSUME YOUR POST. 


10-91 


ANIMAL. 


10-91 A 


STRAY 


10-91B 


NOISY ANIMAL 


10-91C 


INJURED ANIMAL. 


10-91 D 


DEAD ANIMAL. 


10-91 E 


ANIMAL BITE. 


10-91G 


ANIMAL PICKUP. 


10-91J 


PICKUP/COLLECT 


10-91L 


LEASH LAW VIOLATION. 


10-91V 


VICIOUS ANIMAL. 


10-95 


REQUESTING AN ID/TECH 


UNIT 




10-97 


ARRIVED AT THE SCENE. 


10-98 


AVAILABLE FOR ASSIGNMENT 


10-100 


CIVIL DISTURBANCE - 


MUTUAL AID STANDBY. 


10-101 


CIVIL DISTURBANCE - 


MUTUAL AID REQUEST 




11-00 CODES 


11-10 


TAKE A REPORT 


11-24 


ABANDONED AUTOMOBILE 


11-25 


TRAFFIC HAZARD. 


11-26 


ABANDONED BICYCLE. 


11-27 


10-27 WITH THE DRIVER BEING 


HELD. 




11-28 


10-28 WITH THE DRIVER BEING 


HELD 




11-40 


ADVISE IF AN AMBULANCE IS 
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Link Technologies CA 510-623-6680 96 TERMINALS 

Locus Computing CA 310-337-5995 24 SOFTWARE/COMMUNICAT/NETWORK 

Logical Connection LA 504-295-3344 24 LOGICAL CONNECTION 

Logitech CA 510-795-0408 144 MOUSE, SCANNERS 

Lotus MA 617-693-7001 96 LOTUS SPREADSHEET 

Lotus GA 404-395-7707 24 LOTUS WORD PROCESSING 

Lucid CA 214-994-8125 144 LUCID 3D 

Mace, Paul Software OR 503-482-7435 24 MACE UTILITIES 

Madge Networks CA 408-955-0262 144 TOKEN-RING PRODUCTS 

Magee Enterprises, Inc GA 404-446-6650 168 AUTOMENUrTREEVIEW 

Magitronic Technology NY 516-454-8262 144 MOTHERBOARDS 

Magnavox CA 310-532-6436 144 COMPUTERS/MONITORS 

Main Lan FL 407-331-7433 24 MAINLAN 

Mannesman Tally WA 206-251-5513 24 PRINTER ACCESS 

Mansfield Software Group.., CT 203-429-3784 144 KEDIT FOR DOS & OS/2 

Manugistics VA 301-984-5222 24 SOFTWARE 

Manx Software Systems N J 201 -542-2793 24 AZTEC C 

Martek CA 714-453-1210 96 SCANNERS 

MASS Microsystems CA 408-522-1248 24 STORAGE DEVICES 

Masterclip Graphics FL 305-967-9453 144 BUSINESS GRAPHICS SOFTWARE 

Mathematics FL 813-683-6840 144 MATHEMATICA SOFTWARE 

Matrix Technology MA 61 7-569-3787 24 SOFTWARE 

Maxi Host Support CA 209-836-2402 24 

Maxis Software CA 510-254-3869 144 

Maxtor/Miniscribe CO 303-678-2020 96 

Maynard Electronics FL 407-263-3502 24 

McAfee Assoc CA 408-988-5138 168 

Media Vision CA 510-770-0968 144 



900 SERIES CODES 



OTHER CODES 



MAXI HOST BBS SOFTWARE 
SIMEARTH,SIMCITY,SIMANT 
HARD DRIVES 

TAPE BACKUPS 
VIRUS PROTECTION 
MULTIMEDIA PRODUCTS 
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Megahertz UT 801-273-6649 144 MODEMS 

Meridian Data CA 408-439-9509 144 NETWORKS 

Micro Display Systems MN 612-438-3513 24 MONITORS 

Micro Help GA 404-516-1497 288 UNINSTALLER 

Micro Solutions IL 815-756-9100 144 PARAL. HARD/TAPE DRIVES 

Microcom MA 617-255-1 125 24 CARBON COPY.WORKMANAGER 

Microdyne DC 703-760-8509 24 NETWORK HARDWARE 

Micron Technology ID 208-465-7755 144 MICRON COMPUTERS 

Micronics CA 510-651-6837 144 COMPUTER.MOTHERBOARDS 

Micropolis Corp CA 818-709-3310 24 HARD DRIVES 

Microhm WA 206-649-9836 24 R:BASE 

MicroProse MD 410-785-1841 24 GAMING SOFTWARE 

Microspeed CA 510-490-1664 144 PERIPHERALS 

■ Microsoft WA 206-936-6735 144 WINDOWS, DOS, SOFTWARE 

Microsystems Software MA 508-875-8009 24 CALANDER SCHEDULER 

Microtech CT 203-469-6430 24 MAC MEMORY 

MicroTekLab CA 310-538-4032 144 SCANNERS 

Microtest AZ 602-996-4009 24 LANPORT 

Mitsubishi CA 714-236-6286 96 MONITORS 

Mountain Network Solutions. CA 408-438-2665 24 TAPE BACKUPS 

Mouse Systems (MSC) CA 510-683-0617 144 MOUSE 

Multi-Tech Systems VI N 612-785-9875 144 MODEMS 

Mustang Software CA 805-395-0650 168 WILDCAT.QMODEM.OLX 

Mutant Group OK 405-372-6621 168 MUTANT BBS SOFTWARE 

Mustek Inc CA 714-453-1210 96 SCANNER PRODUCTS 

Mylex CA 51 0-793-3491 144 MOTHERBOARDS 

National Semiconductor CA 408-245-0671 24 ETHERNODE.MAINLINK 

NCD Distribution FL 305-599-0749 144 FULL PRODUCT LINE 

NEC Technologies MA 508-635-4706 144 COMPUTER.PRINTERS 

Network Products Corp CA 818-441-6933 144 NCSI, ACS2, NMP2, XCS2 

NetWorth TX 214-869-2959 24 ETHERNET CARDS 

New Media Graphics MA 508-453-0214 144 VIDEO CAPTURE BOARDS 

NewGen CA 714-641-3869 96 PRINTERS, PLOTTERS 

Night Owl BBS NY 716-881-5688 168 NIGHT OWL CDROM DISK 

NISCA TX 214-446-0646 24 SCANNERS 

Northgate MN 612-361-5217 96 NORTHGATE COMP SYSTEMS 

Norton-Lambert CA 805-683-2249 144 CLOSE-UP/LAN 

Novell CA 801-429-3308 96 NOVELL NETWORKING 

Novell Desktop Systems CA 408-649-3443 24 COMPUTERS 

Nuiq Software Inc NY 914-833-1479 144 POWERBOARD BBS SOFTWARE 

Number Nine MA 617-862-7502 96 ADVANCED VIDEO 

Ocean Isle Software FL 407-778-2407 144 REWRITABLE DISK DRIVES 

OCR Systems PA 21 5-938-7245 24 READRIGHT 

Okidata CA 609-234-5344 96 PRINTERS 

Olicom TX 214-422-9835 24 LAN & MULTIUSER BOARDS 

Omen Technology OR 503-621-3746 96 DSZ - ZMODEM PROTOCOL 

Ontrack Computer Systems ... MN 612-937-0860 24 HD PREP SOFTWARE 

Open Network NY 718-638-2239 24 NETWORKING 

Orchid Technology CA 510-683-0555 144 VIDEO CARDS 
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Origin TX 512-328-8402 24 GAMING SOFTWARE 

Pacific Data Products CA 619-452-6329 24 LASER PRINTER PRODUCTS 

Pacific Microelectronics. . CA 415-941-9699 144 MAC-IN-DOS/COMMON LINK 

Packard Bell CA 818-313-8601 24 COMPUTER SYSTEMS 

Palindrome IL 708-505-3336 24 NETWORK SOFTWARE 

Panasonic NJ 201-863-7845 24 PRINTERS, SCANNERS, CPUS 

Paperback Corporation CA 4 1 5-644-0782 1 68 SOFTWARE 

Paradise Systems CA 714-753-1234 144 VIDEO CARDS 

Patton & Patton Software. CA 408-778-9697 24 FLOW CHARTING SOFTWARE 

Pentax Technologies CO 303-460-1637 168 SCANNERS, LASER PRINTERS 

Peripheral Land CA 510-651-5948 96 DATASTORAGE PRODUCTS 

Persoft Software Wl 608-273-6595 144 SMART TERM SOFTWARE 

Phoenix Technologies CA 714-453-8619 144 MOTHERBOARD BIOS 

Pinnacle Publishing WA 206-251-6217 24 DATA STORAGE PRODUCTS 

Pinpoint Publishing PA 707-523-0468 24 MICRO COOKBOOK 

Pioneer Software NC 919-851-1381 144 Q & E SOFTWARE 

PKWare Wl 414-354-8670 168 PKZIP COMPRESSION 

PLI CA 510-651-5948 24 REMOVABLE MEDIA 

Plus Development CA 408-434-1664 24 HARD DRIVES 

Polaris Software CA 61 9-592-2674 144 PACKRAT SOFTWARE 

Powercore IL 815-468-2633 144 NETWORK SCHED 3/WINMAIL 

Practical Peripherals CA 805-496-4445 1 44 MODEMS 

Priam Systems CA 408-434-1646 24 HARD DRIVES 

Princeton Graphic Systems. GA 404-664-1210 24 MONITORS 

Procom Technologies CA 714-852-1305 96 HARDWARE SUPPORT 

Prometheus Products OR 503-691-5199 144 FAX/MODEMS 

Promise Tech CA 408-452-1267 144 CACHING DISK CONTROLLERS 

Proteon MA 508-366-7827 24 NETWORKING BOARDS 

Public Brand Software IN 317-856-2087 144 SHAREWARE SOFTWARE 

Pure Data TX 214-242-3225 144 NETWORKING BOARDS 

Qmail TN 901-382-5583 168 QMAIL OFFLINE READER 

QMS AL 205-633-3632 24 PRINTERS 

Quadrarn GA 404-564-5678 24 MEMORY SOFTWARE 

Qualitas DC 301-907-8030 144 386MAX & BLUEMAX 

Quantum CA 408-894-3214 24 HARD DISK STORAGE 

Quarterdeck Office Systems. CA 310-314-3227 144 QEMM386 
Quercus Systems CA 408-867-7488 144 REXXTERM 

Quess Micro CO 719-597-8670 144 TELEMAGIC & ADD-ONS 

QuickBBS FL 407-896-0494 168 QUICKBBS BBS SOFTWARE 

MORE TO COME, NEXT ISSUE! 



CODE 7 MEALTIME 

CODE 8 REQUEST COVER/BACKUP. 

CODE 9 SET UP A ROADBLOCK. 

CODE 33 MOBILE EMERGENCY - CLEAR 

THIS RADIO CHANNEL 



Thank You 

JAZ2LICKSH 

WILLIAM TELL 

BILL 

MATT 

JEFF 

BRIAN 

DIGITAL THUNDER 

D-CRYPT 

SPLICE 

ERIC 

MAJOR COYOTE 

EDWARD 

JOSEPH 

MODEL-T 



Den 't miss an issue! 
Subscribe TODAY! 



[Deadlines: 

I Articles, display advertising, classifieds for the October 1995 Fourth Quarter issue must be received by 
. September 1st, 1995. Subscriptions can still be backdated to the January 1995 First Quarter issue, if 
preferred. Supplies are being used up quickly, so if you need to get that first quarter issue, you had better 
I hurry up and request it. Remember, you may fax in your order, call it in or write us. We accept Discover, 
I AE, Visa and MC. 



Wanted: BBS Numbers/Listings 

If you have a current listing of BBS' in your area, you've got exactly what we need! If you'd 

like to help us out, mail or fax your BBS listing to us. You may send it to us on paper or 

floppy. We can accept IBM 1.44M & IBM 720K 3.5", IBM 1.2M & IBM 360K 5.25" and Amiga 

880K 3.5" disk formats. Send all disk material in simple ASCII text format. 

Send to: 

Blacklisted! 411 BBS Numbers 

P.O. Box 2506 

Cypress, Ca 90630 
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New Jersey BBS Listing! 



(201)209-1857 NJ Hamburg 
(201)223-0485 NJ Secacus 
(201)228-0009 NJ Caldwell 
(201)239-0001 N J Verona 
(201)239-5452 NJ Verona 
(201)261-0127 NJ River Edge 
(201)261-6848 NJ River Edge 
(201)262-6612 NJ River Edge 
(201)265-7364 NJ Emerson 
(201)279-7048 NJ Clifton 
(201)283-1806 N J Butler 
(201 )299-8650 N J Boontown 
(201)301-2182 N J Madison 
(201)307-1452 NJ Park Ridge 
(201)313-0002 NJ Fairview 
(201)327-3321 NJ Ramsey 
(201)327-5775 NJ SaddleRiver 
(201)331-1797 NJ Parsippany 
(201)335-3238 NJ Parsippany 
(201)337-7336 NJ Franklin Lks 
(201)338-3569 NJ Bloomfield 
(201)338-5265 NJ Bloomfield 
(201)340-2394 NJ Clifton 
(201)342-5659 NJ Hackensack 
(201)347-0465 NJ Budd Lake 
(201)347-9284 NJ Stanhope 
(201)361-1371 NJ Dover 
(201 )374-2730 N J Newark 
(201)378-3218 NJ South Orange 
(201)391-3209 NJ U SaddleRiv 
(201)398-2373 NJ Hopatcong 
(201)399-0717 NJ Irvington 
(201)399-4772 NJ Irvington 
(201)423-4258 NJ Hawthorne 
(201)437-4355 NJ Bayonne 
(201)439-1994 NJ Bergenfield 
(201)444-1822 NJ Glen Rock 
(201)444-8052 NJ Glen Rock 
(201)467-3269 NJ Short Hills 
(201)471-1832 NJ Wallington 
(201)471-6391 NJ Passaic 
(201)472-7785 NJ Clifton 
(201)478-1016 NJ Clifton 
(201)481-4108 NJ Newark 
(201)485-0299 NJ Newark 
(201)503-0929 NJ Parsippany 
(201)514-1949 NJ Chatham 
(201)523-1162 N J Paterson 
(201)523-2058 NJ Paterson 
(201)523-8212 NJ W. Paterson 
(201)538-6087 NJ Morristown 
(201)546-1468 N J Clifton 
(201)567-6994 NJ Tenafly 
(201)567-7328 NJ Englewood 
(201)568-7293 NJ Tenafly 
(201 )569-6685 NJ Cresskill 
(201)573-0719 NJ Montvale 
(201)575-8991 NJ Montville 
(201)584-2563 NJ Randolph 
(201 )585-0957 N J Fort Lee 
(201)595-1573 N J Haledon 
(201)605-8117 NJ Morristown 
(201)612-0559 NJ Ridgewood 
(201)612-8594 NJ Ridgewood 
(201)614-8732 N J Passaic 
(201)617-8054 NJ Union City 
(201 )626-3550 N J Jersey City 
(201)633-9346 NJ Paterson 
(201)635-5726 NJ Chatham 
(201)641-5375 NJ Little Ferry 
(201)641-7307 NJ Moonachie 
(201 )652-0969 NJ Glen Rock 
(201)652-6628 NJ Ridgewood 
(201)653-6228 NJ Hoboken 
(201)659-8032 NJ Hoboken 
(201)661-2690 N J Nutley 
(201)664-7217 NJ Hillsdale 



Fast Data 
Labor Board 
The Forest(tm) 
MicroSellar 
CYBERIink 
Hades 
Modem Pit 
Heaven'sGate 
CCS 

Dean's Office 
StarshpEntrprse 
DesignedLetters 
Null Pointer 
Quantum Zone 
Tower 
Vista Ads 
ArrowTack 
Synergy Online 
Silicon BBS 
Metal Connx 
Realm/lmagntn 
Golden Dane 
SynerSys 
The Laboratory 
The Outer Limit 
OtherSide, women 
Digital Exper 
Millenium 
Classic Car 
Saddle River 
Evergreen 
Yours Truly 
The TERN. 

ComputerNookery 

Bytes'n Bits 

Malibu 

Flash Fire 

Meeting Place 

The Market, inv 

Nickalfs Kastle 

Passaic 

Laser Conntion 

Int'lTrade 

KA2HHB HAM BBS 

PC. BBS 

Videopolis 

Lowe's Plaza 

Butterfly 

The Last Word 

Caretakers 

Maple Leaf 

Token Ring 

APFL-The BBS 

ENGLEWOOD CONN 

BOSS 

PlainBrownWrap 

Over the Edge 

Central Core 

Jug Clod 

Phantom 

Last Days 

EastCoastCirBd 

Informatix 

Nut House 

Psi-Kick 

Hot Tub Chat 

NewptCtr 

First Class 

The Machine 

Waterside 

Roy Hobbs BBS 

EqUiNoX BBS 

Phoenix 

SuccessNet 

Vital COM BBS 

221-B Baker St 

E. I. B. 



(201)667-2504 N J Nutley 
(201)669-9857 NJ West Orange 
(201)672-8969 NJ Orange 
(201)675-2154 NJ E. Orange 
(201 )677-3040 NJ Orange 
(201)678-1367 NJ Bloomfield 
(201)678-1721 NJ Orange 
(201)680-1336 NJ Bloomfield 
(201)691-4424 NJ Netcong 
(201)691-5500 NJ Stanhope 
(201 )692-1 1 1 N J New Milford 
(201)692-3705 NJ Teaneck 
(201)694-5081 N J Wayne 
(201 )694-6835 NJ Wayne 
(201 )694-7425 NJ Wayne 
(201)694-8122 NJ Wayne 
(201)729-2186 NJ Sparta 
(201)729-7046 N J Sparta 
(201)729-9538 N J Sparta 
(201)731-6416 NJ West Orange 
(201)731-9425 NJ West Orange 
(201)742-1860 NJ Paterson 
(201)748-8643 NJ Bloomfield 
(201)751-5608 N J Belleville 
(201)751-7766 N J Belleville 
(201)764-8669 NJ Highland Lks 
(201)765-0164 NJ GreenVillage 
(201)765-9090 NJ Florham Park 
(201 (779-5495 N J Lodi 
(201)794-0463 NJ Fair Lawn 
(201)796-1827 NJ Saddle Brook 
(201)801 -9216 N J Teaneck 
(201)804-3916 NJ Lyndhurst 
(201)822-3658 NJ Madison 
(201)831-8152 NJ Ringwood 
(201)863-5253 NJ Union City 
(201)887-7463 NJ Parsippany 
(201)904-9781 NJ Prospect Pk 
(201)912-8915 NJMillburn 
(201)916-1725 NJ Clifton 
(201)927-5106 NJ Succasunna 
(201)933-8061 N J Rutherford 
(201 )933-9048 N J Wood-Ridge 
(201)934-0861 NJ Mahwah 
(201)935-1104 NJ Lyndhurst 
(201)935-1485 NJ Lyndhurst 
(201)941-3302 NJ Cliffside Pk 
(201)941-7778 NJ Ridgefield 
(201)943-1209 NJ Cliffside Pk 
(201 )989-0528 NJ Mount Hope 
(201)989-8107 N J Dover 
(201 )989-8323 N J Dover 
(201 )998-7337 NJ N Arlington 



(609)228-6596 
(609)232-1245 
(609)232-2258 
(609)235-4568 
(609)239-1587 
(609)261-5772 
(609)262-0038 
(609)263-0406 
(609)298-3669 
(609)299-0374 
(609)324-9187 
(609)327-5553 
(609)327-9133 
(609)346-9721 
(609)374-0988 
(609)383-9400 
(609)384-9012 
(609)435-1663 
(609)435-5991 
(609)451-7950 
(609)455-1665 
(609)461-6254 
(609)461-6986 



NJ Deptford 
NJ Turnersville 
NJ Deptford 
NJ Moorestown 
NJ Burlington 
NJ Mount Holly 
NJ Wlliamstown 
NJ Sealsle City 
NJ Bordentown 
NJ Penns Grove 
NJ Columbus 
NJ Millville 
NJ Millville 
NJ Pine Hill 
NJ Turnersville 
NJ Northfield 
NJ NationalPark 
NJ Stratford 
NJ Voorhees 
NJ Bridgeton 
NJ Bridgeton 
NJ Riverside 
NJ Riverside 



Nutley BBS 

NJ Intel. Agcy 

Hdq Info Svc 

Deans Info Cntr 

Get A Life! 

Unitex.the UN 

Rivendell 

Arc Xchg 

PC-CS 

InfoExchange 

GearBox 

The Dx Connect 

Jungle STS #12 

Gelb's BBS Dir 

Ed Gelb's DBase 

SonNet Center 

Lily of Alley 

Remote Host 

New World 

Get A Life! 

Sportsbd 

Trailblazer 

Playroom 

The Vortex BBS 

Adv Guild 

NEW POWER BBS 

Pick's Place 

Dream line 

Masters, Astron 

Whoopi-Cat BBS 

Loading Zone 

Friends! Too 

Quadrophonia 

The Strand 

SailBoard 

BEACON STUDIOS 

Compucon 

Deredain'sRealm 

STARBASE OMEGA 

Lightning Bolt 

The Odyssey 

Planet DX 

FawltyTwrs 

Harry's Place 

BillBoard 

Starship II 

B.FW.K. 

rockpile.com 

RED DEER TABLE 

Starlifter 

E-Patrol 

Eureka 

Free For All 

Tee Shot 
Compu-Data 
OverlandXprs 
The New Domain 
Stonehenge 
Nonprofit Net 
Craig's BBS 
After Midnight 
CentraLink 
Micro 
Bible BBS 
Union Lake 
Towers Intl 
Signal Hill 
Dark Side Moon 
Academia,+CDR 
Park Cove IBM 
DON'S 

EtherealPlane 
Algorithms Inc. 
Lunatics Lounge 
BBS Express 
Virt Mkt Place 
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(609)466-9272 
(609)467-0244 
(609)467-1206 
(609)467-2905 
(609)467-3898 
(609)467-5540 
(609)482-7345 
(609)485-2380 
(609)486-7302 
(609)530-0046 
(609)546-2792 
(609)547-4566 
(609)563-1682 
(609)582-9546 
(609)584-1478 
(609)585-8902 
(609)586-4847 
(609)587-2672 
(609)587-4651 
(609)588-8153 
(609)589-1125 
(609)627-3291 
(609)627-7279 
(609)627-8369 
(609)628-431 1 
(609)628-4372 
(609)645-0089 
(609)662-6923 
(609)662-8533 
(609)665-0699 
(609)665-0969 
(609)665-4243 
(609)678-5360 
(609)678-6076 
(609)691-3228 
(609)692-3591 
(609)692-9366 
(609)693-9262 
(609)722-5315 
(609)742-8223 
(609)748-1728 
(609)748-3166 
(609)748-3916 
(609)753-2540 
(609)758-1991 
(609)764-0812 
(609)767-5429 
(609)768-5689 
(609)768-6585 
(609)770-1588 
(609)771-3177 
(609)778-5922 
(609)783-5864 
(609)784-1529 
(609)784-9404 
(609)795-7456 
(609)799-9607 
(609)825-1621 
(609)835-1090 
(609)845-9171 
(609)853-1155 
(609)861-1131 
(609)882-6058 
(609)895-0398 
(609)896-3256 
(609)896-3691 
(609)921-0354 
(509)927-2059 
(609)935-7435 
(609)953-0769 
(609)965-5716 
(609)971-9518 



NJ Hopewell 
NJ Swedesboro 
NJ Swedesboro 
NJ Swedesboro 
NJ Swedesboro 
NJ Swedesboro 
NJ Maple Shade 
NJ Atlantic Cty 
NJ Merchantvlle 
NJ Trenton 
NJ Haddon Heigh 
NJ Audubon 
NJ Miliville 
NJ Pitman 
NJ Hamilton 
NJ Yardville 
NJ Mercerville 
NJ Mercerville 
NJ Mercerville 
NJ Hamilton Sq 
NJ Pitman 
NJ Lindenwold 
NJ Clementon 
NJ Clementon 
NJ Petersburg 
NJ Petersburg 
NJ 

NJ Cherry Hill 
NJ Pennsauken 
NJ Pennsauken 
NJ Cherry Hill 
NJ Pennsauken 
NJ Pennsville 
NJ Pennsville 
NJ Vineland 
NJ Vineland 
NJ Vineland 
NJ Forked River 
NJ Moorestown 
NJ Gloucester 
NJ Galloway 
NJ Smithville 
NJ Atlantic 
NJ Atco 
NJ New Egypt 
NJ Delran 
NJ Atco 
NJ Voorhees 
NJ Atco 
NJ Voorhees 
NJ Ewing Twp 
NJ Lumberton 
NJ Lindenwold 
NJ LaurelSprgs 
NJ Voorhees 
NJ Cherry Hill 
NJ Plamsboro 
NJ Miliville 
NJ Willmgboro 
NJ Deptford 
NJ Woodbury 
NJ Dennisville 
NJ Ewing 
NJ Lawrencevlle 
NJ Lawrencevlle 
NJ Lawrencville 
NJ Rocky Hill 
NJ Linwood 
NJ Salem 
NJ Medford 
NJ Egg Harbor 
NJ LanokaHarbor 



(908)205-0189 NJ Metuchen 
(908)245-6938 NJ Roselle 
(908)246-7632 NJ Somerset 
(908)247-8252 NJ E Brunswick 
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Cyberdream BBS 
Gap Chasm 
Alex's World 
BerrySoft 
Beckett, FAX 
Alex Wld Comp 
Next Generation 
Casino 

DataLogic Sys 
Haunted Mansion 
KISS. BBS 
The Cosmos 
Towers BBS 1 
Star Trek 
Mourning Glory 
Z-Ware Systems 
Freedomlnfo,ham 
The TAO BBS 
the DEALMAKERS 
Chemcheaux 
OmniLink Hqts 
TechLine 
Thunder Inc 
Dark Shadows 
InfoNet 
MENHIR 
CyberDyne 
PCUG South NJ 
DILLIGAS 
Facul'y Lounge 
Space Stationll 
Backdraft BBS 
Galaxy 
GDS Online!!! 
Singles Bar 
Towers BBS 2 
Alpha Omega 
Poor Richards 
Pretzel Zone 
Cvclops 
CLUB 
Challenger 
Atlantic Coast 
PicsOnline! 
The Wall 
Radio Wave 
Fortress 

ElectronSymetry 
BBs 

Zade Designs 
CJCC Forum 
Vitamin Shop 
Class Bulletin 
StarPort Omega 
Computer Connx. 
CastleCyberClds 
PlainsboroGeese 
Holly City BBS 
MegaByte 
Bill's 

Glou Co Law 
Bucky's BBS 
Abyss 

NJ Comp Conn 
Revision Sys 
Detour 
Twilight Zone 
Linwood TBBS 
Wolfs Byte 
Praedo 

Accurate Softw 
Paul's Boutique 

MicroFone Info 
Heaven's Gate 
Franklin'sTower 
E Brunswick 



(908)249-3709 NJ 
(908)249-4306 NJ 
(908)254-81 17 NJ 
(908)257-6029 NJ 
(908)272-6890 NJ 
(908)273-7914 NJ 
(908)298-9098 NJ 
(908)329-3216 NJ 
(908)354-4395 NJ 
(908)354-6979 NJ 
(908)355-3592 NJ 
(908)355-6057 NJ 
(908)355-9298 NJ 
(908)362-6907 NJ 
(908)363-2760 NJ 
(908)364-0841 NJ 
(908)381-5682 NJ 
(908)388-3496 NJ 
(908)389-8473 NJ 
(908)463-0001 NJ 
(908)469-0049 NJ 
(908)494-3649 NJ 
(908)517-1431 NJ 
(908)525-9440 NJ 
(908)528-2278 NJ 
(908)537-4207 NJ 
(908)542-7085 NJ 
(908)544-8193 NJ 
(908)545-2769 NJ 
(908)566-8267 NJ 
(908)572-7490 NJ 
(908)580-0486 NJ 
(908)583-7894 NJ 
(908)591-2673 NJ 
(908)627-0318 NJ 
(908)634-1673 NJ 
(908)634-5117 NJ 
(908)637-8638 NJ 
(908)638-5766 NJ 
(908)654-3178 NJ 
(908)665-5992 NJ 
(908)671-2528 N J 
(908)688-0738 NJ 
(908)706-0321 NJ 
(908)707-0855 NJ 
(908)722-2231 NJ 
(908)730-9002 NJ 
(908)735-2180 NJ 
(908)739-3693 NJ 
(908)752-9285 NJ 
(908)753-2371 NJ 
(908)755-4461 NJ 
(908)757-3908 NJ 
(908)758-5206 NJ 
(908)769-1779 N J 
(908)777-7380 NJ 
(908)787-8383 NJ 
(908)806-8856 NJ 
(908)821-1684 NJ 
(908)821-3962 N J 
(908)821-8015 NJ 
(908)846-1854 NJ 
(908)846-7981 NJ 
(908)851-2416 NJ 
(908)859-0162 NJ 
(908)862-0631 NJ 
(908)874-4104 NJ 
(908)879-5143 NJ 
(908)888-3959 NJ 
(908)905-8031 NJ 
(908)905-9066 NJ 
(908)914-1922 NJ 
(908)914-8014 NJ 
(908)914-8150 NJ 
(908)914-9807 NJ 
(908)918-8682 NJ 
(908)925-0845 NJ 



HighlandPark 

N. Brunswick 

Sayreville 

E Brunswick 

Kenilworth 

Summit 

Roselle Park 

Dayton 

Elizabeth 

Elizabeth 

Elizabeth 

Hillside 

Elizabeth 

Blairstown 

Lakewood 

Lakewood 

Rahway 

ScotchPlains 

Tinton Falls 

Piscataway 

Piscataway 

Metuchen 

Oakhurst 

Parlin 

Sea Girt 

Hampton 

Ocean Twn 

Eatontown 

NewBrunswick 

Matawan 

Edison 

Millington 

Laur. Harbor 

Marlboro 

Middlesex 

Fords 

Woodbridge 

Hackettstown 

Glen Gardner 

Westfield 

Summit 

New Monmouth 

Union 

Middletown 

Somerville 

Bndgewater 

Belle Mead 

Annandale 

Holmdel 

Middlesex 

S.PIainfield 

N Plamfield 

Edison 

Red Bank 

Plainfield 

Edison 

PortMonmouth 

Flemington 

Franklin Pk 

Somerset 

Kendall Park 

Somerset 

Somerset 

Union 

Phillipsburg 

Linden 

Skillman 

Chester 

Hazlet 

Lakewood 

Lakewood 

S Toms River 

Toms River 

Toms River 

Beachwood 

Neptune 

Winfield 



StormWatch I 

Fleet Street 

Cop Shop 

Brunswick Mart 

The Arena 

Dmaster's Den 

Just Programs 

Alteredlllusion 

Integrtd Circts 

Computer Junct 

Home Base 

Mom's Homemade 

Programmer's 

Cliffside Park 

ByteWise(tm) 

Adams Computer 

Zooman's Zoo 

TreeFort 

Generic 

Cork Board 

Graphics BBS 

MFTBBS 

IronHorse 

CentNJMicroConn 

BART's Place 

Rat City BBS 

DigitalDimen 

University,CAD 

Lake of Fire 

DZK-OS 

ADAMSCOM 

MilkyWay 

Magic Dominion 

OffHourRockers 

Airport II 

Dad'sPIc 

Best Buy Onlm 

EdgelightOnlme 

Arrakis 

Westfield DL 

Summit PCB ! 

Wild Bill's 

Union Station 

Imperiumms 

Optical 

Sorcery 

DEALMAKERS 

Data-Base 

HighFrontier 

ACGNJ Main 

Raider 

StarGate 

Code Blue 

Switzerland NJ 

[mediaprofonly] 

SW Soc South 

POW/MIA Info 

SophS/W 

Gay/Les Mecca 

Message Central 

KendallPark 

Starship 

Somerset Centrl 

My Home 

Armory 

Never Enough 

Logic Gate 

SunBurst 1 

Dream Home 

Zipper 

CAPTIAN HOOKS 

Ground Zero 

Follies 

Medical BBS 

Syrinx 

New JerseyLand 

NO UPLOADS 
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By: Sssinner 



There is a heated battle being waged between the National Security Agency (NSA) and privacy rights agencies 
and experts, such as the Electronic Frontier Foundation (EFF), over a data encryption device known as the Clipper Chip. The 
Clipper Chip is a NSA-developed data encryption chip that would grant it's users secure on-line and telephone transmissions. 
The Clipper is special in that it has a back door built into it that would allow law enforcement agencies to monitor any 
transmissions made using it's encryption scheme. After obtaining the two halves of the key to that particular chip held by 
government escrow agencies, any law enforcement agent would be able to intercept any transmission over telephone lines 
without the knowledge of the individual making that transmission (Barlow, 44). 

Stewart Baker, Chief Counsel for the NSA, wrote the article "Don't Worry, Be Happy" in an attempt to defend the 
NSA's position against it's critics. In the only public article written by the NSA, Baker claims that by building a back-door into 
every data encryption device, the government will be able to thwart criminals such as child pomographers, drug traffickers, 
and terrorists. He claims that law enforcement agencies would only use the Clipper to monitor suspected felons, and it would 
never be used on innocent civilians Mr Baker fears the day when "anyone who buys an US$80 phone gets an 'encrypt' 
button that interoperates with everyone else's... In such a world, every criminal will gain a guaranteed refuge from the police 
without lifting a finger" (Baker, p132). 

John Perry Barlow, the vice-president of the EFF, reports in his article "Jackboots on the Infobahn" that there is 
government has yet to prove a realistic need to listen in on our encryption, either now or in the future. He fears that instead 
of being a security measure, as the NSA contends, the back-door would become a means for our government to obtain "Big 
Brother" powers (47). 

The NSA's logic in promoting the Clipper is "How can anyone expect the standard-setting arms of government 
to use their power to destroy the capabilities of law enforcement - especially at a time when the threat of crime and terror 
seems to be rising dramatically?" (Baker, p1 32) In an attempt to prove his point, Baker pointed to the case of a computer- 
using pedophile, who the police suspected of using a widely available encryption program to record his contacts with 
numerous young boys that he met through computer bulletin boards (100). Barlow adds that the NSA also believes that the 
Clipper would allow the US to intercept terrorist plots that they feel "are more likely to ripen to hideous fruition behind a shield 
of encryption" (46). 

Barlow believes that anybody smart enough to steal or build a nuclear weapon, or another such device that 
would be of any major significance, would also be smart enough to use an uncompromised encryption scheme or other means 
to communicate, rather than use Clipper (46). He also points out that "the last people who popped a hooter in the World Trade 
Center were able to get it there without using any cryptography and while under FBI surveillance" (Barlow 46). Barlow 
suggested that old-fashioned investigative techniques would be more useful in preventing the next such terrorist act, rather 
than compromise our privacy. 

Baker says that there are only two reliable methods currently available to catch crime bosses; one is to "turn" 
one of the people in their organization, and the other is to __^^^^^^^^^^^^^^^^^_^^_^^__^^ 



wiretap (100). He claims that turning an underling isn't as 
effective as a wiretap, and the evidence obtained through 
them is not always usable in court, whereas a wiretap records 
the crime bosses themselves committing the crimes. 

In writing his article, Barlow interviewed a 
number of government officials involved in the policy of 
Clipper, including the Vice-President. None of these 
heavyweights have been able or willing to contest his points 
with any argument stronger than the one offered by White 
House staffer, Mike Nelson, who said "If only I could tell you 
what I know, you'd feel the same way I do." (Barlow 44) 
Barlow points out that Mr. Nelson's information is coming from 
the NSA, "which given its strong interest in the outcome, 
seems hardly an unimpeachable source" (Barlow 44) 

Mr. Baker and Mr. Barlow each represent the 
two strongest opposing powers in this controversy, and it is 
concievable that they will continue to agree to disagree. Mr. 
Barlow accuses the NSA of having the President's ear, while 
Mr. Baker brushes the EFF off by claiming they are little more 
than "people who couldn't go to Woodstock because they had 
too much trig homework" (Baker 100) Either way, this 
appears to be a contest of monumental importance, with the 
nation's long-revered right to privacy and freedom of speech 
in the balance. 

Works Cited: 

Baker, Stewart A.. "Don't Worry, Be Happy." Wired. 2.06 

(1994): 100-133. 

Barlow, John Perry "Jackboots on the Infobahn " Wred 2.0 
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of this. 
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mm giRMft iMMMrm timi j 

_ _ .. _ ■■«•'■ — ■« — — — — — —J 

There's always something new going on around us - 
even at the gas station down the street. We've 
noticed these nifty little satellite links at various gas 
stations throughout our area and we've pondered the 
thought of exactly WHAT they are. ...First, we 
considered a statement we read somewhere else that 
went something like this: "the dishes you see are, in 
all probability, receivers for whatever music they wind 
up playing for the enjoyment of their customers." 
Now, this statement was in reference to "satellite 
dishes" found atop food stores in the New Jersey 
area. ..Naw, that's not it. Then we considered the 
possibility of ATM information processing. ...nope., 
that's not it, either!.. Come to find out, after asking a 
few gas station employees, it has something to do 
with billing, but nothing to do with ATM purchases, etc. 
Of course, these people only work there, so what do 
they know, right? Well, the story goes on to say that 
each time a sale is made (or, at the end of the day, all the 
sales are gathered up — this is the only point at which the 
employees of the various stations differ in stories) 
anyhow, this is when the information of the sale is 
transmitted to a satellite and then "bounced" back to 
some central point for processing. So, this does have 
something to do with billing, but all of the employees 
became a little uneasy with the mention of credit card 
purchases, etc. So, we do not have the entire truth, we 
believe. Pictured about is the "link" in it's entirety. They 
all pretty much look exactly like this one - we know this 
one. ..we've had to sort through all of the pictures. The 
picture to the right is a close up of the feedhorn 
assembly. Why'd we put it in here? Why the hell not! 
We figured SOMEONE might want to take a closer look at this thing! If any reader of ours happens to work 
for the manufacturer of this information system or works for a gas station — AND has a clue about this 
technology, why not drop us a note and tell us what we're missing out on here. Thanks. Each time a trip is 
taken to a local gas station or some nearby store, there's always some new technical wonder to snoop around 
into. Whether it be a satellite dish, a new vending machine that needs a debit card to function, a payphone 
that accepts credit cards, a gas pump with a stripe reader built in — one thing remains constant. We WANT 
to know how the damn thing works and what limits we can push it to. Right? Speaking of gas station pumps 
with credit card stripe readers. They're so abundant in southern California, that it's something to consider. 
Slide your credit card in, wait a few seconds, the display reads, "PUMP GASOLINE" or "PUMP FUEL". .you 
get the idea. You pump 1 5 gallons in your heap on 4 wheels, drive off - it's done. It doesn't matter if you used 
your credit card, a card you borrowed from a friend, your wifes card, your moms card, hell, even a card you 
found laying on the asphalt one day while walking through a supermarket parking lot! You know why this is 
so easy to get away with? The damn gas pumps fitted with the credit card payment acceptance hardware DO 
NOT ASK FOR A P.I.N.!!! What a mistake! If your card get's stolen, it's most likely that one of the first places 
the thief will attempt to hit will be a gas station - to fill 'er up!! It's so easy to get away with. The thief doesn't 
have to deal with a cashier, and it's tempting to get some free gas, you know! It's time to burst that bubble for 
a few people, though. There have been reports of 
MANY gas stations arming their pumps with 
security cameras somewhere close. It's easy to 

believe with all these pinhole cameras available I Wm&IEiM^^^^^^^W \\\\\\\\ 

for nearly nothing at all. So, it's not too safe for I PtV^^K yuilil" 

just everyone now that some of the gasoline big 
boys have caught on to the schemester credit 
card thieves' plan to systematically steal all of 
their precious fuel. ..oh yeah!, right.. So, next time 
you find that brand new shiny credit card laying at 
your feet.. ..pick it up! However, if you consider 
using it, remember that big brother gas man might 
be watching YOU! Hint: it's hard to see in the dark 
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The Black Market 



COMPUTER REPAIRS for Atari, Commodore, Coleco, 
Sinclair/Timex, Osborne, Tl, TRS-80 and IBM compatible 
Reasonable flat rate plus parts and shipping. 
Buy/Sell/Trade/Upgrade. SASE appreciated. Computer 
Classics, RT-1, Box 117, Cabool, MO 65689. (417) 469- 
4571. 

GET THE ULTIMATE CD-ROM! The virus-base contains 
thousands of fully functional computer viruses, virus 
construction toolkits and virus related info $99 95 + $7.00 
express shipping. Better hurry' American Eagle Publications, 
P.O. Box 41401, Tucson, AZ 85717. 

CELLULAR EXTENSIONS, SEND US YOUR PHONE or buy 
a new or used phone from us! Proof of line ownership 
required. We have phones from $129 Call for a list of 
available models, we program many different brands 
including all Motorola, same day service. Orders only: 
(800)457-4556. inquiries to: (714)643-8426. C.G.C 
USED CELLULAR HANDHELDS: Panasonic EB3500 
portables, includes a battery (but no charger) forty number 
alpha memory, good working order, available as an extension 
to your existing line for $279. or as is for $129. Orders only: 
(800)457-4556, Inquiries to. (714)643-8426. C G.C. 
CELLULAR TELEPHONE. Reprogram from your computer, 
Motorola bag changed in minutes. Compare, ours is at a 
much lower cost Software & manual $199. Loader phone 
available Voice or FAX (903)389-8352. Call now. MC/VISA 
CELLULAR PROGRAMMING CABLES: For Motorola Flip 
Series $100, 8000/Brick Series $150, Mobile/Bag: $100 
(includes handset jack, the only way to program Series 1). 
Panasonic and Mitsubishi Cables $100. All cables are high 
quality, professionally assembled and guaranteed. Guide to 
Cellular Programming, everything you ever wanted to know, 
correct wiring diagrams, troubleshooting, etc.: $45. Other 
accessories and programming software available Inquiries 
to: (714)643-8426. orders only to: (800)457-4556. C G C 
SCANNER MODIFICATION HANDBOOK. Big! 160 pages! 
More than 20 performance enhancements for PRO-2004 and 
PRO-2005. Restore cellular, increase scanning speed, add 
6,400 memory channels, etc. Step by step instructions, 
photos, diagrams. Only $17.95. + $3.50 hipping ($4 50 
Canada). (NYS residents add $1 38 tax.) CRB research, Box 
56BL, Commack, NY 11725 Visa/MC welcome. (516)543- 
9169. 

SIX DIGIT LED CLOCKS (with seconds): AC powered, highly 
accurate. Several models. Free catalog! Whiterock 
Products, 309 South Brookshire, Ventura, CA 93003. (805) 
339-0702.-9169. 

HELP NEEDED! to decompile a piece of software so that 
source code can be modified and software recompiled. Call 
Andy at 805-523-2035 or Write to 13812 Grand Isle Dr. 
Moorpark, CA 93021 




SCANNERS AND SECRET FREQUENCIES. Best selling 
new 320 page book covers scanning from A to Z. "Useful, 
knowledgeable, and readable" (Popular Communications). 
"Wry, cynical, and immensely entertaining" (Paladin Press). 
"A must for the radio monitoring enthusiast" (Radio Monitors 
of Maryland). "An enormous collection of information. ..plenty 
of great reading" (Monitoring Times). "You can't miss" 
(American Survival Guide). "A high point of scanner 
publication" (RCMA) Only $19 95 + $3 S&H. Check, Money 
Order to Index, 3368 Governor Drive, Ste. 273-N, San Diego, 
CA 92122 Credit cards only, 800-546-6707. Free catalog of 
insider books on scanners, cellular, eavesdropping, cable, 
much more. 



Would VOU like to place an ad in our Marketplace? 

Discover the benefits of advertising in our Magazine 

For information and rates, call us at 

(310)596-4673 

or Write us at 

Blacklisted! 411 

P,Q« Box 2506 

Cypress, C a 906 30 
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Write for Blacklisted! 411 

Send your articles to: 

Blacklisted! 411 Article Submissions. 

P.O. Box 2506 

Cypress, Ca 90630 

or Fax us at 

(310)493-3998 



Are you tired of reading the same old thing? 
Well, if you are, you should consider writing 
for us. Send us articles for print and your 
name is sure to get "out." When you do 
decide to send an article for print, you might 
consider using an "alias" if you feel more 
comfortable with that Do whatever it takes, 
just send in those articles! Don't be quiet! 
Speak out! Say something! Tell us your 
opinion, or send us your facts on any topic 
that you feel we all want to see Once 
you've written it, you may FAX it to us, send 
it to us, utilizing our wondrous U.S. Postal 
Service or call our voice number and leave 
a message about it. You want to be heard? 
First thing you have to do is SPEAK UP!!! 



SOUTHERN CALIFORNIA RADIO STATION GUIDE 

Complete Listing of ALL Commercial FM Radio Station? in the 
Los Angeles, Orange, San Bernadino, Riverside, San Diego, 
Ventura and Santa Barbara Counties. Listings include Call 
Sign, Power Level, City of License, and Format. Listings 
Updated Regularly Send $5 to PVS PO Box 1032, Los 
Alamitos, CA 90720 or call (714)894-2751 
HEAR NON-COMMERCIAL SATELLITE RADIO programs 
right in your area without the use of a dish or any other 
expensive receiving equipment. Thousands of these 
programs are operating today across America. Programs 
may include talks shows, weather, sport events, news feeds, 
financial reports, music programs and data ports. This 
technology is received through a high tech. SCSRT1 card. 
Find out today what you have been missing: (800) 944-0630. 
Credit card orders accepted. 

NO SOUND ON PREMIUM CHANNELS? It will happen 
sooner or later on your Jerrold DFBB-7 Impulse Ask 
Manhatten! Soundboard brings the round back. Best sound 
fix on the market. Easy to install soundboard $24.95. Easy 
to build soundboard schematic, parts list and common chip 
number $34.95. Send us your unit and we will install the 
soundboard for $59.95. SOUNDMAN, 132 North Jardin St., 
Shenandoah, PA 17976. (717)462-1134. 
TIRED OF SA TEST KITS with marginal or inconsistent 
performance? 21st Century Electronics and Repair 
guarantees peak performance with 40-pin processor kits. 
New, more flexible program with additional features puts 
others to shame. Price $49 each or 5 for $233. 1st time 
offered. (404)448-1396 

CELLULAR RESTORATION on your 800 Mhz scanner 
performed expertly for $40 including return shipping. 
Guaranteed. Offer expires soon. Keith Perry, 607 Osage Dr., 
PO Box 816, Leande-, TX 78641. (512) 259^1770. 
ZENITH Z-TAC COMBO UNITS only $50!! We have a limited 
supply of ST1 600 ana ST1 020's in stock. Hurry and get them 
while they last! We also have ZTAC remotes for $5 each 
Looking for a channel 21 (Disney) notch filter? We have 
them, too! $20 each! Looking for 6 5536MHz crystals? We 
have them! $4 each. PVS, P.O. Box 1032, Los Alamitos, Ca 
90720. (310)594-4078. 



ADVERTISE IN BLACKLISTED.411 Reach thousands of 
readers in the US, Canada, Japan, the UK, Australia, and 
elsewhere. Join our long list of satisfied clients who have 
made Blacklisted. 41 1 their vehicle for reaching customers. 
Call 310-596-4673 and request our rate card information. 
SCIENTIFIC ATLANTA 8580 $225, 8570 $250, 8550 $150, 
8500 $120. Will program your 8550, 8500 EAROMS for 
$7.50. Cable security key gets past collars $25. Add $5 
shipping. No TX sales. Send money order to: K. Perry, PO 
Box 816, Leander, TX 78646-0816 Phone: (512)259-4770. 
COIN-OP VIDEO ARCADE GAMES. Repairs, parts, boards, 
accessories, and empty cabinets available for all your video 
game and pinball needs. Largest selection available in the 
United States Eldorado Games 91 1 S. East St. Anaheim, CA 
92805 or call (714) 535-3300 FAX (714) 535-3396 
FEDERAL FREQUENCY DIRECTORY! Kneitel's "Top 
Secret" registry of government frequencies, New 8th edition. 
268 pages! FBI, DEA, Customs, Secret Service, BATF, 
Immigration, Border Patrol, IRS, FCC, State Dept., Treasury, 
CIA, etc. & surveillance, bugs, bumper beepers, worldwide 
US military, 225 to 400 Mhz UHF aero band, Canadian 
listings, & more! Ultimate "insider's" directory! Standard 
reference of law enforcement, news media, private security, 
communications industry & scanner owners. $21.95 + $4.00 
shipping ($5.00 to Canada). NY State residents add $2.21 
tax CRB Research Books, Box 56BL, Commack, NY 11725. 
Visa/MC welcome. Phone orders (516) 543-9169 weekdays 
(except Wednesday) 10 to 2 Eastern. 

TV CABLE/SATELLITE ("GRAY" MARKET) 

DESCRAMBLER EXPOSE, 160pp, illustrated, with vendor 
lists for chips, parts. Law, countermeasures, much more! 
$23.95 + $3 S/H. Check/MO INDEX, 3368 Governor Dr , 
Ste. 273, San Diego, CA 921 22. Credit cards only: (800)546- 
6707. Free catalog of "insider" books on scanners, cellular, 
credit, eavesdropping, much more. 

A TO Z OF CELLULAR PROGRAMMING. Programming 
instructions on over 300 phones in a software database. Also 
back door and test mode access instructions for all the 
popular models: manufacturer's contacts, system select, 
lock/unlock info Just $59.95. Orders only: (800)457-4556, 
inquiries: (714)643-8426. C.G.C. 



MARKETPLACE CLASSIFIED 
ADVERTISING RATES! 

Subscribers get ONE free 5-line ad per issue. 

Each additional line - $1 .50 

Non-Subscriber rates are as follows: 

2-line personal ad - $5 per issue 

5-line money saver ad - $10 per issue 

10-line business ad - $15 per issue 

20-line business ad - $20 per issue 
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VOICE CHANGING ACCESSORY. Digital voice changing: 
male to female, female to male, adult to child, child to adult. 
Use with any modular phone 16 levels of voice masking. 
Connects between handset and phone STOP THOSE 
ANNOYING TELEPHONE CALLS! Sound older and tougher 
when you want to Not a kit. Fully assembled. Use with 
single or multi-line phones. 30-day refund policy Ask for 
free catalog of our products. VISA/MC ok Xandi 
Electronics. 1270 E. Broadway, Tempe AZ 85282-5140. Toll 
Free order line: (800)336-7389. Technical Support: 
(602)894-0992 

CB RADIO HACKERS GUIDE! New! Big 150 pages, 
pictorials, diagrams, text. Peaking, tweaking and modifying 
200 AM and SSB CB radios. Improved performance, extra 
capabilities! Which screws to turn, which wires to cut, what 
components to add: Cobra, Courier, GE, Midland, Realistic, 
SBE, Sears, Uniden/President. $18.95 + $4 S&H ($5 
Canada) NY State residents add $1 96 tax CRB research, 
Box 56BL, Commack, NY 1 1725. Visa/MC accepted. Phone 
order M-Tu-Th-F, 10 to 2 Eastern time (516) 543-9169. 
CELL PHONE cloning for the guy who has (two of) 
everything. Must have current service contract. For more 
info, call Keith (512)259-4770. 6426, Yuma, AZ 85366-6426. 
COIN-OP VIDEO /(RCADE GAMES. Parts, boards, and 
empty cabinets available for your projects. Cabinets 
available for $75. C.J. Stafford, (301)419-3189. 
TRUE TAMPER-PROOF Security Screw Removal Bits. The 
super torx kit includes: T-10, T-15, T-20 & T-25. Complete 
set for $19.60. TOCOM 5503 bit $8.95. TOCOM 5507 bit 
$19.95. Zenith PM/PZ-1 bit $10 95. Jerrold Starcom bit 
$19.95. Pioneer (oval) bit $23.95. Oak Sigma (oval) bit 
$23.95. Security Screws available. Tamper-Bit Supply Co. 
(310)866-7125. 

FM STEREO TRANSMITTER KIT. Transmitter broadcasts 
any audio signal from a CD player, VCR, or cassette player 
to FM stereo radios throughout your home and yard. Uses 
the unique BA1404 IC. Tunable across the FM band, runs 
on 1.5 to 12 volts CD. PC board/components, $24. 
Visa/MC. TENTRONIX, 3605 Broken Arrow, Coeur d'Alene, 
ID 83814. (208)664-2312. 



Send all 
Internet E-mail 
submissions to: 

zachary@dreamsys.com 

Note: We do not answer reader questions 

over the internet. We only accept article 

submissions, feedback, subscription 

requests, distribution requests and letters to 

be answered within the magazine. 

Doit!! 



Fax us at: 
(310)493-3998 
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CONSUMERTRQNICS 



2011 Croscant, Alamogordo, NM 88310 

(505) 439-1776, 439-8551 ; 8AM-7PM MST, Mon-Sat 
Fax (24-hr ordf llneri : (505)434-0234,434-1778 

(orders only; if you get voice, enter "#1 1 #1 1 ■ any time). 

As seen on CBS "SO Minutes.' Add S5 total SM (US, Canada). 
All items in stock. VISA, MCard OK. No CODs or 'bill me's. NEW 
CATALOQ [200+ offers) S2 border, S5 wb (check or MOpIS 
free catalog. NO dealers. Educational purposes only. *AII software 
supports all IBM-PC compatfbla x86 systems (8086 - Pentium) 

OFF-THI-BHtU: HARDWARE 
Van Eck Systems ♦ ATM2 ♦ Data Card ReadevWrltsrs «. RfttMffladaf 
Ultrasonic^ D*l*etorsfl*c*rv*r*Xmlttert<lamm*r»fllas1*rs ♦ Secu- 
rity/Surveillance ♦ EM LalyWeaponiyCountormeasurss ♦ Resonant 
CryttakNeurophonoHHetileronymus Radionics ♦Voice Olsgulsers ♦ 
Phone Color Boxes ♦ DTMF Decoders ♦ Lineman's Handsets ♦ Bug & 
Tap Detectot/Blaster ♦ Car|aekvKldnap Foliar ♦ Hearing Asslstor ♦ 
Shriek Module ♦ TENS ♦ 6th Sense Communicator ♦ Subliminal Miitt' 
Amp ♦ Levttator ♦ Vortex Generator ♦ Noise Cancelling System ♦ 
Ultrasensitive SoundllghMFVfMF Detectors ♦ Electronic Dowser ♦ 
Laser ♦ Bacteria Detection Kit • morel See our New Catalog! 

■ PBCIAL PROJECTS 
We d*tlgivtuildbbUlrrtepal*modlty'fflaintalrrtonsult on any device- 
tyttenvprojectprocets • slectricalfelectroniophonetomputet'moch- 
anicaftptlcatfcutomotrve for businessbersonaHnventlon prototyping 
need. Confidentiality guaranteed. Oescnbe & include S30 pre-engineer- 
ing fee (does not obligate you). Time and cost estimates in 7-10 days. 
CELLULAR & CORDLESS PHREAKING 
How cellphones operate and art modified Vulnerabilities to hack attack and coun- 
termeasures. Comprehensive Info on reprogrammina NAMs, ESNs, etc (cloning), 
control data formats, computing encoded MINs, ESNs, SIOHs, operating systems, 
PROM* and their programming, forcktq ACK, test mode and resets, scanning, 
tracking, scanner restorations, treq and channel allocations, roaming, ESN and 
SIOH tables, partstculpmem sources, attendant stations, non-USA bands, health 
concerns, and the ECPA and critique. Step-by-step descriptions to keypad-repro- 
gram 100+ popular ceSphonet. Plus complete section on phreaMng cordless 
phonesl Much more. Comprehensive. Invaluable • 10 times mora Info than our 
competitor's S79 manual! Hi. (Do SoodaJ Prajtcts (above) for up-to-date hard- 
wareSoftware). pBX HACKING 

1000s of PBXs are hacked to the tune of about $8 BUkxvyrl While our -VOICE 
MAIL HACKING' (below) details how VMSs are hacked for -phun' and profit • In- 
cluding VMS methods for hacking P8Xs themselves • T8X HACKING" addresses 
it other Issues relating to PBX hacking, Including counter-measures. Can your busi- 
ness or agency afford a $90,000 phone fraud loss (average tow due to hacked 
P8Xs)7 As described In Forbes Magazine article. S2». 

VOICE MAIL HACKING 
How Voice Mali Bex systems are used and the specific ways they are hacked. In- 
cludes ASPEN. MESSAGE CENTER, BIX GENESIS, RSVP, SYDNEY, PHONE 
MAIL. AUOIX, CINDY, CENTAGRAM, SPERRY LINK, EZ, etc. Absolutely required 
for aH users, sysops and security personnefl S2I. 

PHREAKING CALLER IC & ANI 
Details on how they work and dozens of effective ways of defeating CaSer ID, ANI. 
•59, -57, CaM BlockJna and '67. Also describes Caller 10, Orange. '*oe. 
Cheese and CF Bote*, ESS. SS7, E-911, various CLASS services. Cttft. HON 
PUB DA, CAMA. DNR, 100-ECR, Otverten. LO Extender*, Centre* - mora. $29. 
Beyond PHONE COLOR BOXES 
Dozen phone color boxes described - many circuits. Plus Can Forwardbig, 
Conlerenc-lng, Pkrsak History, Glossary, Olverters, Extenders, Loops, 
REMOBS, Bridging Heads & Cam, Optocom, 3rS Party and many other non-box 
methods ■ more. $3t. 

COMPUTER PHREAKING 
Describes In detail how computers penetrate each other, and how VIRUSES, TRO- 
JAN HORSES, WORMS, etc are implemented. Dozens of computer crime and 
abuse methods and countermeasurts. Includes disk Med with hacker text files md 
utilities, and the legendary RUSH0T+ protection system (El Choice, PC Maga- 
zine). 38S advice, password defeats, glossary - much morel Manual + Disks • 
"•• The HACKER FILES 

Compilation of 100s of the best articles written (in ASCII) by top hackers & phreak- 
ers. Covers every ma(or topic In hackerdoml 3 HO Disks* $51. 

AUTOMATIC TELLER MACHINES 
ATM crime*, abuse*, wiMrabUWe* and defeat* expos**! 100+ methods do- 
tailed. Include: Physical, Reg. E, cipher, PIN compromise, card countertetting, mag- 
netic stripe, false front, TEMPEST, Van Eck. tapping, spoofing, inside job, super- 
cool, vibration, pulse, high voltage - others. Case histories, law. counttrmeasurts. 
detailed security checklist labeled internal photo*, figures. ATMs contain up to 
$250,000 m cashl Recant $350,000 ATM crime spree sal unsolved! $31. 

CREDIT CARD SCAMS 
Cardholders, merchants, banks surfer $ BMtons in losses annually because of credit 
card fraud. Describes every known means of credit card fraud and scam*. Protect 
yogrsolft $2*. 

CONS, SCAMS * RELATED SWINDLES 
Con*, scams and related swindles fleece American* of $100+ BIMon per yea/1 The 
most comprehensive survival manual on cons & scams of at kinds - from the clas- 
sic to hi-tech. Details 100s, their many variations, and counteimaasures. Protect 
yourself! $31. 

Beyond VAN ECK PHREAKING 
Eavesdropping on TV and computer video signal* using an ordinary TV described 
In detail Includes security Industry reports. Range up to 1 KM. Plans include both 
the Consumertronlc* and the original Top Secret Vaa Eck designs! $2>. 
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Hacking 101 / Cheating without cheat codes & How to count to hex FF 

by xspOOk 



Many of you just entering the H/P community often wonder 
how to go about manipulating files and warez Why not start 
by what most of you do best? Cheat! 

I've been cheating at computer games for quite some time 
(starting with the early Apple II boxes and the trash-80) and 
feel that this is an excellent place to begin to learn file 
manipulation. Most of today's games play over an extended 
period (2 to 3 weeks or more) and, unless you are intra- 
venously fed Jolt Cola during game play, will most likely need 
to use the valuable SAVE GAME function. This, will be our 
target. 



Elementary Shtuff 



(For those of you with a command over hexadecimals and 
binary, feel free to skip this portion of text.) 

First off, we need to recognize the importance of the 
Hexadecimal number system. It is the translating number 
system from what we humans (as well as MAC users) know 
as the decimal (base ten) numeral system to the computers 
binary numeral system (base two). Hexadecimal is based on 
16 but keep in mind that zero counts as a number in 
microprocessor land so a normal count of fifteen (eg. 0, 1, 2, 
3, etc., 15) yields 16 numbers. 

So how do we count in hexadecimal when there are only ten 
kinds of numbers (0-9)? In hex (as it will be referred to) we 
include the letters A-F after the number 9. Here is a count to 
21 in both decimal and hex: 



Decimal 


Hex 


Decimal 


Hex 





00 


11 


0B 


1 


01 


12 


OC 


2 


02 


13 


0D 


3 


03 


14 


0E 


4 


04 


15 


OF 


5 


05 


16 


10* 


6 


06 


17 


11 


7 


07 


18 


12 


8 


08 


19 


13 


9 


09 


20 


14 


10* 


0A 


21 


15 



* Just like we learned to count in elementary in base ten, a 
place holder increment is added when we max out the 
previous place holder (a 1 x 16 place holder in hex is added 
at decimal 1 6 while the count from to 1 5, or hex 0-F, begins 
again) 

So why does hex translate to binary so well? You've no doubt 
heard that computers run on a series of zeros and ones called 
bits (You have, haven't you?) and that eight bits make a byte 
(and taking it a step further, two or four or eight bytes make a 
word- depending on whether you have a 16-bit, 32-bit, or 64 
bit processor, but this is not important.) Whew! This byte may 
be too much to bite on let's take a nibble instead... 

A nibble is one-half of a byte or four bits Four bits can be 
represented as sixteen different states - perfect for one 
hexadecimal digit. Here's another count: 



Hex 


Binary 


Hex 


Binary 


00 


0000 0000 


08 


0000 1000 


01 


0000 0001 


09 


0000 1001 


02 


0000 0010 


0A 


0000 1010 


03 


0000 001 1 


0B 


0000 1011 


04 


0000 0100 


OC 


0000 1100 


05 


0000 0101 


0D 


0000 1101 


06 


0000 0110 


0E 


0000 1110 


07 


0000 0111 


OF 


0000 1111 



I've placed a space to separate each byte into two nibbles 
The first hex digit (zero in all the cases shown here) get 
represented as binary 0000 whilst the second hex digit 0-F 
are represented binarily(l think it's a word) as 0000 to 1 1 1 1 . 

Whaddya say we put this to use ... 



Tools of the trade 

SAFETY FIRST: 

Remember when using power tools, to use EXTREME 
caution. Safety counts all the time. Make backup copies of 
your files and all will probably be okay :) 

A bit editor (like Norton's Disk Editor) will be your tool of 
construction (destruction, reconstruction?) It's not my place to 
teach you how to use this. I'll assume that you'll be smart 
enough to figure it out by your lonesome. But make certain 
you know how to load a file, find hex patterns, edit sectors and 
write sectors to disk Also make certain you know not to be 
hacking at your boot sector (we'll learn about that some other 
time) 

For our demonstration purposes, I'll be manipulating the save 
game of the registered version of DESCENT. I've chosen 
Descent because it some what pisses me off that when I use 
the cheat codes (Gabbagabbahey) It clears my score and 
reminds whenever I blow the shit outta any ship that I am a 
cheater. Cheater indeed .. 

You can change almost any save game file, so long as you 
know where the game wants to save your mediocre abilities 
to disk. Look for extensions such as SAV, SG0, PLR, HSG 
(for Heretic), DSG (for DOOM) or filenames that you have 
named yourself. 

Go ahead a play a game. But don't get too engrossed into it. 
What you need to accomplish here is making your character 
have different numbers for things such as score, hit points, 
gold, shield level, spells available or whatever your game 
does. Try to make each number unique because we'll be 
looking for that particular number with the bit editor. Write 
down (or memorize) key attributes that you want to change. 
In my case, I only want to maximize my shield so I don't have 
to worry about it for the rest of the game. Okay, stop playing 
and save your game. Hey, I said stop playing! 

Start your bit editor and Open up your save game file For 
Descent, it is your pilot's name plus and extension of SGx 
(where x equals the slot position minus one where you saved 
to e.g. XSPOOK. SG3 - the fourth save slot for xspOOk ) If 
your editor wants to view this in text mode, slap it's face hard 
and switch views to hex. After all, we're changing numbers 
not writing a letter. 

Check to see if your editor has a hex converter. This is most 
helpful because now you don't have to do your own 
conversion from decimal to hex. I last left my shield at 88. 
Using the hex converter, I type in 88 (in the decimal spot) and 
receive 58 in the hex spot. I know now exactly what I'm 
looking for. 

The problem now is looking for a hex 58 through this whole 
file where there might be more than one instance of hex 58. 
Most games tend to group all of their variables within the 
same few offsets. So if you've managed to write down other 
things, you should be able to tell where your target number is 
by checking if other variables are close by. Use the find 
function if you have one, your eyes if you don't. 
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Special notes for Intel machine users: 

Can't find your number? Here's a little history lesson ... the 
Intel processor (8086) was designed to be backward 
compatible with early micro-controllers such as the 8008 
Switching from 8 bits to 16 bits and keeping compatibility was 
an issue so the Intel machine stacks a 16 bit value into it's 
registers head first, resulting with the least significant byte 
reading into the address first. Your editor should shield you 
from this But, if it doesn't, try reversing the order (e.g.- if you 
are looking for hex 0A 09, try 09 0A) 

Using the Find function, I find my hex 58 under the offset 
13E0, fourth byte. I know if I max it out by changing it to hex 
FF that the change would be insignificant (hex FF = 255, the 
maximum number for the shield is 200 in regular play - what 
good is 55 more?) So, see that byte juxtaposed right beside 
it? (Should be filled with a value of 00) Well, that's part of your 
shield as well. However, the programmer decided to not allow 
a full 16 bit integer into this variable (I'm not exactly sure how 
or why.) Nevertheless, through trial and error (changing the 
bytes, playing and loading the game, studying numbers, and 
copying the backup back over the original,) I managed to fill 



this byte with only a hex 5F as opposed to a full hex FF, giving 
me a shield of about 24000-plenty to get me by until I need to 
cheat again. 

Edit your sectors and write them to disk Play your game. If 
change was not good, then copy your backup to the original 
and try again at a different occurance. Repeat until an 
obvious change has been made. Congrats - you just cheated. 

Now just because I showed you how to manipulate the 
Descent save game, doesn't mean this methodology works 
only here Experiment with almost any game ,e.g. Ultima 
series, D&D, warfare games. Back when I was working for the 
military spooks (thus xspOOk), I had a friend who was playing 
a game that involved battle-mechs (forgot the name of the 
game, it was kind of stOOpid ) in which he kept on losing his 
mech. Anyway, armed with a bit editor, I gave this mech 
massive heat sinks, eight large lasers on each arm, personal 
strength and charisma (wish I could of done that to him and 
not his game,) and I even changed the name of his mech from 
"Stinger" to "Bill's mutant VW". He ended up solving the 
game that afternoon. Yes, these are your tax dollars hard at 
work Have fun! 



KNOW THE TRUTH! 



Freedom and Sovereign Technology (FAST) makes its debut with this issue. Volume 1 
Number 1 has three articles. 

BOOK REVIEW OF VULTURES IN EAGLES CLOTHING 

This is a two page book review on how to legally and safely volunteer out of the voluntary income tax People have paid 
thousands of dollars on restoring their sovereign status This book has all that information in one place and proves that beyond 
a reasonable doubt that most of us are already sovereigns and do not have to do something to become a sovereign. This book 
is entertaining, and easy to read and understand It will heal your fears and lay a fire under you to take action with confidence 
and certainty. It has letters in it that make the IRS back off and leave you alone. It contains recent court cases where 
sovereigns have won in court. It has freedom papers in it to safely declare your sovereign status. It has information on the 
Uniform Commercial Code which is the real law the government operates under and shows you how to use it against the 
government. Read this review and then get the book. 

ZIP CODE USE INVOKES FEDERAL JURISDICTION 

This is Vol. I, No. 6 of THE PATRIOT. This article goes into the reasons why zip code use invokes federal jurisdiction. Zip 
Code use is voluntary. You should also know that the Postal service cannot discriminate against the non-use of the ZIP Code. 
The government tells you that use of the zip code speeds the mail but that is not the real reason. By using zip-codes you are 
stating that you are a subject of Congress and a citizen of the District of Columbia who is resident in one of the several States 
and put yourself in the federal zone. This article encourages you to become a State Citizen who is not within the purview of 
the MUNICIPAL LAWS of the District of Columbia. If you are using a ZIP code, you are in effect saying openly and notoriously 
that you do not live in the State of California, but, instead are a resident in the California area of the District of Columbia (a 
federal district). Get this very valuable one page document. $1 .00 [ ]. 

EXPLANATION OF ZIP CODE ADDRESS PURPOSE 

This article gives loads of legal citations showing the true predatory reason the federal government wants people to use zip- 
codes. Zip Code addresses are for the corporate United States and its agents. The federal government has as much taxing 
and regulatory power as it does because almost everyone in the 50 states are using zip code addresses which places all users 
into federal districts. If massive numbers of people stop using zip codes, we can shrink the power of the federal government. 
Get this one page article and learn more about zip codes. $1 .00 [ ]. 

THE CASE FOR THE FREE MARKET 

This is a three page article that makes a case for a compassionate free market where capitalism and socialism can peacefully 
co-exist. It explains why communism failed after seventy years. It presents a workable alternative to the present welfare state. 
It puts the welfare state on a competitive basis with free market alternatives to itself. This article will provide ample food for 
thought. 

(Send $5 for one copy or $50 for a one year subscription of 12 issues) 

To find out more information on these and other fine reading material, write to: 

KRC 

4102 E 7th Street #11 8 

Long Beach, California Republic 

The United States of America 

Phone:(310)436-9604. 
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Nem& Updates 



AOL extends on-line information to pagers 

Vienna, Va. - America On-line has added a new service to its rapidly growing on-line service system. According to sources, AOL will transmit news, 
electronic mail, and other on-line information to customers to broaden the reach and appeal of the on-line industry. The Vienna, Va based company 
said that subscribers with alphanumeric pagers can receive some of the same fare over their pagers that are received through modem equipped 
personal computers. The service would link users personal E-mail box to their pagers allowing mail to be instantly transmitted regardless of location. 
Other services available include news and stock quotes, appealing to financial service people who are frequently out of the office. America On-line 
signed agreements with the paging division of AT&T corp, and the paging provider MobileMedia, to deliver the service America On-line would 
be the first of the three major on-line services to offer such service. The company which has over 2 million subscribers, competes with CompuServe and 
Prodigy. 



Waiting for a Pay Phone 



China's teledensity, the average number of phones per 100 people, was a mere 3.2 phones in 1994. Combine that low number of phones, with an 
economy thats expected to grow 11-14% annually, and you have a recipe for a major telecommunications market. Beijing and Shanghai, two of China's 
most populated cities rated at 18 and 15.7 phones per 100 people respectively. China's Ministry of Posts and Telecommunications plans to increase 
their teledensity 1% each year through the end of the decade. 

Comcast to offer link to internet 

Comcast Corp. is about to offer a new means of accessing the internet. The new system connects you not by phone line, but over your cable TV 
hookup, at speeds of 50 to several hundred times faster than commonly used phone modems. The Philadelphia based cable company said that the 
new system would be built and tested in Lower Merion, Philadelphia and Willow Grove, systems totalling 214,000 subscribers. Over the next year, 300 
families will test the service that Comcast hopes to offer nationally to it's more than 3 million subscribers, late next year. Previously, on-line services 
have only been available over phone lines, but this system is a move to end this monopoly, and stiffen competition between cable and telephone 
companies. Comcast has also made plans to offer standard dial up phone service over its cable systems as well. Although other cable systems have 
been testing cable modems, using the same coaxial cable that deliver TV programs, Comcast is the first to use its own servers to create on-line services 
localized to different cable territories. Comcast executives said new services would become possible as they rebuild their networks with fiber-optics 
nodes, each consisting of 200 to 1000 homes linked via coaxial cable, allowing computer and TV service to be run simultaneously. Comcast is 
considering pricing high speed on-line access at $5 to $10 per month. 

Small satellite dish systems a growing business.. 

The numbers have been counted, and for a new generation of satellite TV, the news is good. In January, Hughes' Direct TV division and partner 
USSB announced that since their small dish satellite services went national in October, they have signed up 350,000 subscribers, and are adding 
100,000 new customers a month, so by the time you read this, they should have around 950,000 subscribers. The manufacturer of the small dish 
satellite systems, Thomson Consumer Electronics produced over 590,000 units by the end on 1994, and is adding manufacturing lines to keep up with 
demand. It takes as much as two months for finished DSS units to reach retailer shelves that account for the difference between finished units and 
subscribers, company officials said. Representatives from all three companies traveled to the Consumer Electronic Show in Las Vegas for a progress 
report. "During the holiday season, consumer demand was extremely strong, and our retail surveys indicate that most dealers had a complete sellout" 
said Jim Meyer, a Thomson senior vice president. Despite its fast growth, satellite TV is a drop in the bucket compared to the nations 58 million cable 
households, but it is a growing market. DirecTv, USSB, and Thomson expect to add up to 1.5 million new subscribers in 1995, and 2 million in 1996, 
and later this year are planning to launch a third satellite bringing the total available channels to nearly 200. The direct broadcast industry finished 1 994 
with 600,000 subscribers. Of those, 250,000 are customers of Primestar, a 4 year old company owned by a consortium of cable operators, using a 
different frequency and a slightly larger dish. Primestar said it tripled subscriptions when in July of 1 994, it switched from an analog system, to one that 
transmits its signals in digital form. During the switchover, Primestar kicked off an ad campaign hoping to take some of the fire out of DSS's national 
rollout. Primestar plans to 80 channels this year, and quadruple "its subscribers to 1 million. 



ISDN Rates? 



Washington - Pressure by industry and government groups is forcing the Federal Communications Commission to back down from a disputed ruling 
that could massively increase ISDN telephone charges to triple or even 24 times current rates. The ruling would require telephone companies to charge 
for ISDN lines based on the number of channels in the ISDN lines. Since most users of ISDN service have the BRI(Basic Rate Interface), which has 3 
channels, the FCC decision would mean a tripling of current ISDN rates. Some ISDN lines for high volume users have as many as 24 channels. 
Sources say that the teleconferencing and interactive imaging systems would be hardest hit by this ruling, crippling new videoconferencing, internet 
providers, and any other data communication system requiring the higher bandwidth of ISDN. That in turn could affect burgeoning sales of ISDN chips, 
video compression chips, and high speed relay chips that go into computer and communications equipment This ruling could also affect emerging ISDN 
technology developed by a desktop networking venture of IBM, Chipcom Corp., and L.M. Ericson. They are developing an ISDN link to a computer 
networking standard known as ATM (Asynchronous Transfer Mode), a networking topology that is more efficient than current networking standards 
such as Ethernet for transferring real time audio and video. The US Commerce Department has entered the fray, telling the FCC that their ruling would 
severely impact new computer services "just as the market for them is poised to take off' said Assistant Commerce Secretary Larry Irving. "Consumers, 
businesses, and educators are using ISDN for high speed Internet access, telecommmuting, videoconferencing, and PC based collaboration", he stated 
that the impact of higher ISDN rates was too great to be addressed by the FCC Common Carrier Bureau as part of a simple tariff filing. "This raises 
policy issues which would be best addressed in the context of a rulemaking process, not in a tariff review process". This feeling was echoed by Santa 
Clara based Intel Corp., stating that the success of desktop PC videoconferencing is dependent on low cost ISDN service. 



In the News 



Israt "s former top wiretapper has been appointed as president of Cellcom, Israel's second cellular telephone network Cellcom announced in March 
that ft mer secret police chief Yaacov Peri would assume the office. Peri, age 51 , retired in February after nearly 30 years in the service that operates 
most oi the legal (ha ha) wiretaps in Israel. 

A past s icret police chief heading a phone company?? The Israeli people should consider the implications. 

Telecom Reform Bill Clears Major Hurdle 

The Senate Commerce Committee has approved a telecommunications reform bill removing most restrictions limiting local telephone companies, long 
distance carriers, cable companies, and electric utilities from competing in each others markets. The panel unsuccessfully tried to pass such legislation 
last year. Major provisions of the bill included: 

• Regional Telephone companies would be allowed to manufacture equipment, a prohibition enacted during the antitrust suit that broke up AT&T. 

• Both regional and local telephone companies could enter the long distance service market once they met a 14 point criteria assuring that their 
local markets were open for competition by other carriers. 
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• Cable TV operators will be allowed to provide dialtone to con; 
companies a monopoly in telephony. 

• Local phone companies could offer cable television in their ov 
have already given this right to Bell Atlantic, and BellSouth, ai 
reform bill could remove all restrictions immediately. 

• Electric utilities that have installed fiber or coaxial lines to subsc 

Last year the Senate Commerce Committee approved a bill opening i 
died in intense bickering by the large telecommunications interest gro 
US made equipment. The regional phone companies seemed happ 
immediate entry into new markets. In addition, direct broadcast satellit 
would classify them as common carriers subjecting them to a myriad o 



ChipT 



A growing problem is surfacing in California, chip theft! An estimated $ 
to recognize is that someone is buying these stolen goods. The chann 
finding their way into legitimate sources of supply. Even worse is th; 
they very well know, or at least strongly suspect are stolen. Serge 
experiences in a number of different chip sting operations. "In one ins 
the properly. I said that it was so hot that I had to handle them with as 
Ihey cam from'" Has Darwinian survival of the fittest finally invaded 
anything to keep production lines going? It appears so. 



Drug 



A new DEA computer network is being constructed to ease drug enfi 
drug enforcement efforts of the four southwestern states of Californi, 
center in El Paso, Texas The network, the Southwest Border States 
field counternarcotic information sharing systems. 
Enterprise Solutions Ltd. based in Westlake Village, Calif was award] 
system that will be integrated with the Entrust family of data security! 
wide area network will be protected by a Cipher X5000 host encryptoi 
was also chosen by the General Services Agency to encrypt informati 




i on the government wide FTS 2000 network X.25 services. The initial 



demonstrations of this i 
1995. 



I network, which could eventually span all 50 states, began in March, and is expected to be completely deployed by mid 



Satellite Radio 



Washington - A new radio service is under consideration by the FCC, one that will make a package of radio stations available almost anywhere. The 
new service including all types of channels - weather, sports, music -would be transmitted by satellite and available nationwide. Other services 
available on such a system would be stock quotes, or other information to a mobile fax machine. To get the service, users would have to install a 
special radio and antenna, and under most proposals, the users would have to pay a monthly fee. But even if regulators clear the service this year, it 
will take up to 3 years for applicants to build and launch satellites. CD Radio Inc. is the first company to ask the FCC to establish the new service, 
expecting to charge between $5 and $10 a month for as many as 50 channels. Retail prices for the recievers have yet to be determined. Local radio 
stations are worried about the systems which will deliver dozens of channels. The stations fear that it will fragment their audiences, drive down 
advertising rates, and shrink funds for local programming. 

Wireless Data Communication 

A new player has entered the fledgling wireless data communications market, but not who you would expect. Newport Beach, California based real 
estate developer, Koll Co. has given another example of the companies plan to deversify from its core commercial development business. Over the 
past year, the company has acquired a homebuilding company, formed a venture to develop in China, and expand its current development operations 
in Mexico, and now the Orance County, CA developer and two partners have jumped into the fledgling market for personal data communications 
services, a market thats expected to explode. The Federal Government is currently auctioning off PCS(Personal Communications Services) licenses, 
which is expected to generate an estimated $10 billion for Uncle Sam. These services will allow consumers to use hand held PCS devices at home, 
work, or on the go. proving invaluable to the telecommuter. The licenses granted by federal regulators have time limits, and Koll and its partners LCC 
and Castlerock Telecommunications, are betting that those who win PCS licenses, cellular and cable TV companies, wont have the ability to build 
their own networks before their licenses expire. Koll has named Mike Mcnelly, as president of the new division, Koll Telecommunications. Mcnelly 
helped build one of the first cellular systems in San Fransisco, and for the last 5 years has run engineering and operations at LA. Cellular in Cerrftos, 
CA. 

Cray Computer Corp. Files for Bankruptcy 

The most well known supercomputer manufacturer filed for chapter 11 protection in late March, signalling the possible end to the newest company of 
supercomputer pioneer Seymour Cray, who also formed Control Data Corp. in 1 957. The company cited problems trying to raise $20 million to continue 
operations as reason for the filing, causing stock in the Denver based company to plunge from 94 cents to 25 cents in Nasdaq trading. The company 
listed its debts at $18.8 million, and assets at $22.9 million in its chapter 11 petition. The company suspended work on it's Cray 3 and Cray 4 
supercomputer lines, and laid off most of it's 360 workers, but "They are planning to stay in business at least until they reach a point where they can 
pay off their creditors, " said Jack L. Smith, a Denver attorney who is representing the firm. Company officials released a statement that the bankruptcy 
was "in the best interests of Cray's creditors, stockholders, and other interested parties." The company becomes the third supercomputer manufacturer 
to seek US Bankruptcy Court protection It follows similar action by Kendall Square Research, of Waltham Mass , and Thinking Machines Corp., of 
Cambridge, Mass., both filing chapter 11 petitions last year. 

University of Michigan Group Forms Community 
Library for the Internet 

A group faculty members and students at the University of Michigan, are trying to create the first community library on the Internet. The library contains 
dictionaries, an atlas, and other basic library books. It also offers texts of many classic books such as the works of Shakespeare. The Internet Public 
Library is available on the World Wide Web at http://ipl.sils.umich.edu Joseph Janes, assistant professor, at the University's School of Information and 
Library Studies, dreamed up the system as work for a seminar he teaches on information technology. "We are a public library ..that serves the 
community of internet users" says Janes last fall, 36 of his students began creating the library. The Internet Public Library opened for business on 
March 17th, and in 3 days, about 2500 Internet travelers from 30 countries has visited the library. Janes said the library will stay open after the term 
ends as several students and other people on the net have volunteered to help keep the system running. He hopes to eventually be able to offer real 
time library assistance. 
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Society! 
BE DIFFERENT! 

THINK! 
HAVE GOALS! 

READ BLACKLISTED! 



Have any "Bright" ideas? 

If so, why not write us 

a letter or give us a call? 

We'd sure love to hear from 

you! 

Really, we would! 



T3a1i)rooKJi M G n'- 



TYPES OF MEN ONE WOULD MEET IN A PUBLIC RESTROOM: 

I . EXCITABLE Shorts half twisted around, can't find hole, rips shorts. 

2 SOCIABLE: Joins friends in piss whether he has to go or not 

3 CROSS EYED: Looks into urinal on left, pissed into one in the center, flushes one on the right 

4 NOSY: Looks into next urinal to see how other guy is fixed. 

5 TIMID. Can't urinate if someone is watching, flushes urinal as if he has already used it. sneaks back later. 

6. INDIFFERENT: All urinals being used, pisses in sink. 

7. CLEVER No hands, shows off by fixing tie, looks around, pisses on floor 

8. WORRIED. Is not sure what he has been into lately, makes quick inspection 

9. FRIVOLOUS: Plays stream up and down and across the urinal, tries to hit fly. never grows up 
10 ABSENT MINDED: Opens vest, pulls out tie. pisses in pants 

I I . DISGRUNTLED Stands for a while, gives up, walks away 

12 SNEAK Farts silently while leaking acts innocent, knows man in the next stall will be blamed 

13 CHILDISH Leaks directly into bottom of urinal, likes to see it bubble 

14 PATIENT Stands very close for a long time waiting, reads newspaper with free hand 
15. DESPERATE Waits in long line, teeth floating, pisses in pants. 

16 EFFICIENT Waits until he has to crap then does both jobs 

17 TOUGH Bangs dick up against side of urinal to dry it. 

18 FAT. Has to back up and take long blind shot at urinal, misses, pisses on shoes. 

19 LITTLE: Stands on box, falls in, drowns. 

20 DRUNK: Holds left thumb in right hand, pisses in pants 
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DEF CON 



Alternative Computer Convention 



August 4-6 Las Vegas 



Friday - Saturday - Sunday at the Tropicana Hotel 



U have this urge to show up!@# 

Loads-o-Fun! K-RaD Ev3nTs iNCIude: 
• Spot the Fed • red box building contest 

• t1 Video Conference with other Cybercafes 

* Hacker II, llluminati NWO & Magic contests 

• Hacker Jeopardy • video room * Net Connection 

Speakers on Hacking, Politics, Internet Security, Digital Freedom 

- EFF - CPSR - Terminus - Roscoe - Bruce Schenier - Parmaster 

- Jim Settle, ex-FBI - Winn Schwartau, Information Warfare 

- Robert Steele, Open Sources - Curtis Karnow - Theora + More 



Subscribe to the mailing lists! EMail 

majordomo@fc.net with the following in 

the body: subscribe dc-announce 



Call the DEF CON voice system 801-855-3326 
Fast voice BBS / Create your own VMB / Voice Bridges 

Join the So.Cal Car Caravan to DEF CON III 
EMail The Jackal (jackal@kaiwan.com) for info 

We have rented out all of VirtualWorld Friday afternoon for 

two hours. If you want in on non-stop BattleTech Killing it's 

$20 for 3 12minute missions. 32 pods at a time! Two Hours! 



COST: $30 in Advance, $40 at the door (Payable to DEF CON) 



Too much crap going on! Email/FTP/WWWAA/rite for more info! 
FTP: ftp.fc.net/pub/defcon/ Voice: 0-700-TANGENT 



Fax: 206-453-9567 Voice Update /VMB: 206-453-1006 



SNail Mail: 2709 E. Madison #102, Seattle, WA 98112 
dtangent@defcon.org http://www.defcon.org/ 
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UFO Thoughts 



UFO's - Propulsion Systems 

by: Brian Vanderkolk 

Back when the concepts of flying began, it turned out to be something called the Bernoulli Effect that kept the primitive gliders 
in the air Basically, the shape of an airplanes wing, the airfoil, causes the air over the top of the wing to take a longer path 
than that under the wing In order for the air to do this, it must travel faster over the top. Because the air moves faster, the 
pressure drops. This is Bernoulli's Theorem. Because the air pressure above the wing is greater than that under the wing, a 
relative vacuum develops that literally sucks at the wing creating lift. Airplanes are held in the air by a vacuum force over the 
wing, not by pressure under the wing as many think. 

But flying began with gliders. The problem was how to keep the aircraft moving through the air. Propulsion. The wright 
brothers had an elegant solution. They simply took two short wings, mounted them on a shaft, and rotated the whole 
structure. The propeller is born. But the propeller has it's limitations. No propeller driven aircraft has ever exceeded the 
sound barrier. The Air Force had experimented with a variant of the F-84 Thunderjet by installing a 6000 hp Allison piston 
engine with a three blade propeller. The aircraft, designated F84-H, was meant to become the first supersonic propeller 
driven aircraft, but only achieved a speed of 670 MPH, not supersonic, yet still claiming the speed record for propeller driven 
planes. The plane also had another claim to fame. It is the noisiest aircraft ever built. Although the plane was not supersonic, 
the tips of the propellers exceeded Mach 1 even while taxiing, creating hundreds or even thousands of small sonic booms 
every minute. 

The next large advancement in aircraft propulsion came with from Nazi Germany in the form of the jet engine, although Hitler 
did not realize the advantage of the design in time to win the war. The jet has undergone many variations and improvements, 
including turbo-jets, turbo-fans, afterburners, and hybrid ram-jets. Jet power brought practical aircraft into the supersonic age 
The fastest acknowledged aircraft is the United States Air Force's SR-71 Blackbird with an absolute world speed record of 
2, 1 93. 1 7 MPH at a record altitude of 85,069 feet, attained on July 28, 1 976. Actual performance of this aircraft is still classified 
even though it has been dropped from service. 

Even though one thinks of jets and supersonic ability as going hand-in-hand, it was the rocket powered Bell XS-1 piloted by 
Chuck Yeager on October 14, 1 947 that was the first aircraft to safely exceed the sound barrier. The XS-1 , or more popularly 
the X-1, was fueled by super cooled liquid oxygen and diluted ethyi alcohol, providing 6000 pounds of thrust. This flight took 
the plane to Mach 1 .06 for 20.5 seconds at an altitude of 45,000 feet, about twice the time the first Wright Flyer was in the air 
on it's maiden flight. Mach 2 was exceeded by Scott Crossfield in the Douglas D-558-2 Skyrocket in November 1953, climbing 
to an altitude of 83,000 feet and diving for the speed run to 62,000 feet. The fastest rocket plane, the North American X-1 5 
was designed to fly in excess of six times the speed of sound at over 250,000 feet altitude, nearly 50 miles. This plane literally 
flew into space and back. The XLR-99 engine on the X-1 5 was the first throttleabie rocket engine, the pilot being able to 
control thrust from 50% to 100% of the 57,000 pound thrust from the engine. The X-1 5 was fueled by liquid oxygen, 
anhydrous ammonia, and hydrogen peroxide. The fastest the X-1 5 ever flew was Mach 6.7 (4534 MPH) on October 3, 1967, 
piloted by MAJ. William J. "Pete" Knight, in a modified X-1 5 designated X-15A-2. 

The Space Shuttle, weighing in at more the 4 million pounds total weight, reaches orbit with the aid of two solid rocket 
boosters each providing 2 million pounds of thrust and three main engines on the shuttle itself providing an additional 1.5 
million pounds of thrust. The main engines are fueled by liquid oxygen and liquid hydrogen. The shuttle orbits at an altitude 
of 380 to 500 miles depending on the mission, at a speed in excess of 27,000 MPH. 

This should give you some idea of the enormous amount of energy and engineering it takes to propel man into space Yet 
all this is done through brute force, utilizing Isaac Newtons third law of motion, "for every action, there is an equal and opposite 
reaction." How on earth, or elsewhere, for that matter, are we ever going to travel the stars with reasonable ease? Let us 
disregard the need to carry massive amounts of fuel for a moment, and let's assume we have a rocket so powerful it can 
accelerate us to the speed of light. It would still take us 3.8 years to reach the nearest star, Proxima Centauri. Sirius, the 
brightest star is the night sky, is 8.76 light years away. The north star, Polaris, is 1,254 and the middle star in Orions belt, 
Alnilam, is 2,038 light years away. As you can see, even at the speed of light, it is nearly impossible to explore the universe. 

But what about exotic propulsion systems? Is warp drive possible? Is there such a thing as anti-gravity? Practical science 
tells us no. Yet there is evidence that such exotic propulsions systems are at least theoretically possible, if not practical in the 
future. There is even evidence that advanced research groups in the worlds top secret military development centers may be 
experimenting with working models of such devices. 

Einstein gave us the theory of relativity, which gave the world concepts such as the time-space continuum and the forth- 
dimensional curving of this continuum through gravitational influences. Relativity theory has been supplanted by quantum 
theory, giving us even more bizarre concepts about our universe. The more mankind learns about his surroundings, the more 
he learns how much more there is to learn. Could there be some forces in nature that we have yet to discover? Have yet to 
realize them for what they really are? Could the answer be right under our noses? It's very possible 

Every electronics student knows that if you pass an electric current through a wire, a magnetic field is created around that 
wire. A powerful magnetic field can be made by shaping the wire in a coil Very powerful electromagnets are used in junk 
yards on cranes to pick up whole cars. By alternating the electric current an oscillating magnetic field arises. This is basically 
an electromagnetic wave. Different frequencies of EM waves manifest themselves as radio waves, microwaves, infrared, 
visible light, ultraviolet, x-rays, gamma rays, and on to the mysterious cosmic rays coming from space. It is obvious that 
electricity and magnetism are related in a fundamental way. Is it possible that either of these is related to gravity? 

(Continued on page 45) 
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UK. Satvnv Coots! 



By Jones Peter 



Here's a list of codes used by official bodies located within the U.K. 


Code 


Desciption of code 


BACK-UP 


Unit behind eyeball vehicle waiting to take the lead. 


BATPHONE 


Unofficial word for H/Held Motorola 8000S cellular phone. 


BAULKED 


Target or unit is held by lights or heavy traffic. 


BIG AIR 


Refers to unit monitoring regular police channels. 


BLOW OUT 


Target is believed to be aware of surveillance. 


BURNED 


Unit car or officaer is believed to have been spotted. 


CONTACT 


Target or targets vehicle relocated after search. 


CONVOY 


Series of vehicles following target also in vehicle. 


COVERT 


Sun visor or body worn disguised microphone. 


CPS 


Cetral police station. 


DRUM 


Targets dwelling. 


EYEBALL 


Covert officer with closest visual on target. 


FOOT MAN 


Officer on foot, usually in the immediate area of the target. 


FRIENDLIES 


Plain clothed policeman mingling with suspects. 


GO 


Unit has permission to transmit. 


HA 


Home address. 


LIFT OFF 


Target is on the move. (Some units say OFF OFF) 


LOG 


Refers to log kept of all target movements. 


MOODY 


Target looking around, showing excess caution, etc. 


NATURAL 


The call of nature. 


NO CHANGE 


Current Situation un-altered. 


NO DEVIATION 


Target continuing in original direction. 


NO NO 


Correct radio proceedure for "no." 


NOT EQUIPPED 


Usually means that a unit has no force-wide VHF radio. 


NOTED 


Transmission received and understood. 


OFF OFF 


Target is on the move. (Some units say LIFT OFF) 


OP 


Observation Point. (Private dwelling or empty flat, etc.) 


ORIGINAL 


Target resumed heading in original direction. 


PERMISSION 


Unit asking for permission to transmit message. 


PNC 


Police National Computer. (Vehicle Checks) 


RECIPROCAL 


Target returning on same route. 


SCOPE 


Refers to a night vision device. (Image intensified 


SO FAR 


Last transmission received. 


STAND DOWN 


Order to conclude that days operation. 


STOP STOP 


Target has stopped. (A warning to approaching units) 


STRIKE 


Command by senior official for strike on premisis or target. 


TA 


Target address. 


TARGET 


Subject or premisis under observation. 


THE FACTORY 


Refers to CPS or units main office. 


TK 


Telephone kiosk. 


WAIT ONE 


Unit told to hold next transmission. 


WOODENTOP 


Unofficial work for uninformed police officer. 


YES YES 


Correct radio proceedure for "yes." 


2 Up (etc) 


Identifies number of people in vehicle. 


(2 clicks) 


Covert way using handheld PTT button to answer "no." 


(3 clicks) 


Covert way to answer "yes" or indicate last message recieved. 




UsefuM-800ANrs 


(80 


0)692-6447 (800)775-8883 


They r 


night be a little old, but they still work! 
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The High Seas of the Arcade, or piracy over the eons 

by Sir Harry Wozniak 



Piracy is a historical fact of life, and the field of arcade games and pinball machines is no exception In fad, one of the most famous game companies 
today started in an attempt to bootleg a popular game during the 30's! Gottlieb had some true inspired success with pinball, with new upstart companies 
like Genco & Mills coming out with their own variations. Ray Moloney started manufacturing his own pinball machine called Ballyhoo, which was named 
after a popular satirical magazine during that time, around 1931 . from the success of Ballyhoo was bom the name of his company, Bally. 

A lot of cross-pollination and similar layouts existed Note the picture of the two pinballs machines, Moon Shot & Tropic Isle. Note how, except for the 
artwork, the game layout is identical. Pinball layouts tended to be symmetrical and fairly limited in scope. Little by little, more intriguing layouts came 
into existence to the point where a symmetrical layout today does not exist. Some revival pinballs harken back to the single level shooter's paradise 
The majority of pinballs today have way too much in the way of ramps and hidden passageways. 

■mmmmummm 

Pinball layouts were generally 
copied back and forth from 
established well known 

companies. That was because 
manufacturing a pinball machine 
took a very well capitalized 
assembly line to turn out the 
complex assemblies required for 
the game. The picture shows 
copying from one company to 
another, both well known pinball 
manufacturers. 

Video piracy goes way back to the 
very beginning, and has been 
much more of a problem over the 
years, when Pong was huge in the 
arcade scene, there were scores of 
Pong clones from different 
manufacturers. It was impossible 
to be able to tell the bootleg 
version from an original, as Pong 
had very little in the way of 
distinguishing characteristics for 
the game. 

Microprocessors allowed for 
greater depth and flexibility in 
arcade games. The first monster 
microprocessor game hit was 
Space Invaders, which used the 
Intel 8080 microprocessor. In no 
short time, pirates began to chip 

around the original program and introduce bootleg versions, some with different graphics or game rules. One such example would be Space Stranger, 
which you shot downwards into a water-filled deep (flip the picture and adjust the graphics tables to suit) No matter what the variation, it was not a new 
game based on the Space Invaders gameplay. It was the same program, slightly modified to appear different. 

Cross-licensing could also create a fun and wonderful headache in trying to determine what is actually a bootleg and what is not. For example, Sega's 

Space Firebird game was actually licensed from Nintendo, who also marketed Space Firebird in their own cabinets. One of THE most famous Nintendo 

games to ever appear, Donkey Kong, was not even created by Nintendo, but by a small company called Falcon, who licensed Nintendo to sell the game 

outside of Japan Originally, the 

game was known as Crazy Kong. 

There were bootlegs of Crazy Kong, 

but the only real Crazy Kongs were 

those with the Falcon symbol, which . ?tmw&,— *- 

was the Falcon bird above the cage. j^ J^^^j^/g * $? -. j % ■ , m , , ■ t ., ™,f If fOrX Ittl 

Technically, the importing of the ^S^I^P'mlr^x&an^iiKimtM' dFJ k W r*rf~&' ffifr lAiMfc/ 

Falcon boards into the USA makes Vj. Mz,^' >^.:.. ' ra3u^H9&3 J&f ■iii^iSill * *" 1 *f*lf m j* u 

them parallel PCBs, which is still an itfCnKwItlfl H m l lJfwffl r<fi«l 

iffy subject in the game world today. 

Courts of law have ruled back and 

forth on the legality of parallel pcbs 

As a rule, the real bootleg pcb is of 
lower quality construction than the 
original PCB It is usually fairly easy 
to tell a bootleg from the original. 
Some bootlegs are so close in 
design, that it is VERY hard to tell the 
difference. One company called 
Orca actually made BETTER quality §| 
PCBs than the ones they pirated 
from! The Orca Crazy Kong was a 
much smaller board than the Falcon 
or Nintendo pcb (the Nintendo PCB 
was huge and had a very bizarre 
design). Orca's design was a dual 




picture (aobve, below) shows the Orca CPU encryption technique. The small 
module on the left shows the module without the potting compound. A thin wire 
is wrapped around the circuit board, connected to the battery (underside right 
of the board). If the wire breaks, all the encryption data is lost. 




This shows the legal and 2 pirated versions of Street Fighter 2. The original 
board is on the left, with two different bootleg types on the right. If you 
play a Street Fighter 2 with strange moves or glitches in the program, it will 
be one of the bootleg versions. 



"But once you are real, you can't become unreal again." 



board system with a clean layout Orca also came out with their own original games, some of which used THE most vicious anti-piracy device known 
in the game business (more on that later). Some famous Orca games were River Patrol, The Bounty, Springer, Changes, Hoccer & Espial (sort of a 
Xevious clone, but with the company name "Thunderbolt" on the screen.) Orca was finally shut down in 1983. and re-emerged for a while under the 
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The boards shown (above, below) are of the Donkey Kong Jr. arcade game. The 
regular board Is on the right, and the bootleg PCB Is on the left. 



name of Kyugo, best known for Flashgal 
and Airwolf. 

Sometimes, other legal companies can also 
start by bootlegging- Toa Plan, for example, 
has been bootlegging for a while, I have 
seen a Toa Plan Frogger bootleg. Fair 
quality. To their credit, Toa Plan cleaned up 
their act and started making their own 
games which were very famous, such as 
Sky Shark, Twin Cobra. Outzone. & 
Knuckle Bash. They went bankrupt last 
year 

Companies have striven to outwit pirates by 
using custom hardware Some hardware 
designs get to be insanely tricky Data East 
had their DECO system, which had a 
potted custom module key and a program 
which loaded from a micro tape cassette 
Every time the game was powered up, it 
would take 2 minutes to load the game 
program the DECO system had a large 
amount of games, but only two hit games, 
Burgertime & Bump & Jump. (Both games 
were licensed to Bally, and put on a regular 
ROM type PCB layout) Sega sought to 

outwit pirates by making scores of custom chips for everything. Namco & Data East also take this approach, with Namco taking it to new heights Data 

East is still the only company I have seen who uses their own flat pack CPU of their own custom design, though. 

The most vicious anti-piracy system was used by Orca, who had plenty of experience to work with. Even today, their system is uncrackable. which 
means that due to it's nature, time is running out for certain Orca games using this system. Basically, the CPU mounted on a small PCB with a battery 
RAM which holds encryption data. The battery power is run through a wire wrapped a couple of times around this custom PCB, and then the whole 
assembly is potted tight. Any attempt to break into the potting can cause pieces to shatter, which cuts the power wire, erasing the encryption data. No 
one has been able to re-engineer this system successfully as of yet. As a result, certain Orca games such as Springer, Mai,,ie Boy & the Bounty & 
Moguchan are worth more and more, if they are in working shape 

Potting CPUs is practiced by other companies, but Orca made it into a high art. Sega used a neater package replacing their 68C\,^ n '. watch batteries 
tor the data. Moonwalker& Shinobi & Altered Beast used this approach, as did Enduro Racer & Space Harrier Sometimes, the batter} encryption RAM 
can be mounted onboard along with the battery, as in the case of Mrtchell's game Buster Bros. Naturally, any attempt to replace V.t encryption RAM 
resulted in the game no longer being operational. 

A rather interesting method of anti-piracy and storage came when Konami announced a game system which used bubble memoiy to store the game 
program, (bubble memory is an interesting technology which is in very little use today which consists of magnetic bubbles being passed along a series 
of magnetic forms on a chip substrate by means of a rotation magnetic field, the memory was read in serial fashion, and proved to be too slow and 
unworkable for videogame situations. 

Capcom thought they had the last word when they invested 5 million + in the design of the CPS system This 3 board integrated system placed all of the 
graphics systems into a single chip, with another giant chip for game encryption, and battery encryption. Capcom used this system for their most 
famous hit game, Street Fighter 2. The game proved to be so popular that it eventually got pirated and in fact, today, the number of bootlegged PCBs 
of any SF2 title exceeds that of the original game. This caused Capcom to basically abandon the CPS system in favor of their System ][ It will 
eventually be cracked, if it's not already 

Bootleggers used hi tech equipment to probe the chip secrets They resort to ciacking the tops form chips and copying the chip die itself. They can 
then contract a reputable chip manufacturer to turn out the chips for themselves (I have seen such an example of a bootleg chip with a Tl signature on 
the mask. The pirate was readily tracked by the batch identification). 

This brings up an interesting aside into the home market where Nintendo is suing Samsung for bootleg donkey Kong Country chips. IMHO, Samsung 
was merely given the chip die and told to run it off for a certain customer. They can claim trade secrets proprietary as a cover, but eventually, all will get 
their just due. 



Blowout Prices! 


Zenith Z-Tac ST-1600 Combo Units 1 


We have a limited supply of Zenith Z-Tac Addressable combo model ST-1600 
and ST-1020 units in stock Each come complete with remote. Remotes: $5.00 

$50.00 


6.5536 MHz "Red Box" Crystals j 


Southern California 
Radio Station Guide 

Complete Listing of ALL Commercial 
FM Radio Stations in the Los 
Angeles, Orange, San Bernadino, 
Riverside, San Diego, Ventura and 
Santa Barbara Counties. Listings 
include Call Sign, Power Level, City 
of License, and Format. Listings 
Updated Regularly. $5.00 


The crystal used to make the infamous "Red Box" is available now at a 
reasonable price. 

$4.00 




Channel 21 "Disney" Filters j 


This is the very notch filter used to receive The Disney Channel on Paragon 
Systems in Southern California They try to charge $150 for this sucker! 

$20.00 




PVS If you need Zenith boxes we got em! 

P O Rav mi9 If you need Zenith Remotes we got em' 

r.V. BOX 1 V3£ lfyou need {hose hard tQ fm(j 6 5536MHz xtals. we got em! 

LOS AlamitOS, CA 90720 If you need channel 21 (Disney) notch filters, we got em! 
(714)894-2751 (310)594-4078 lf y° u need it. call US TODAY' 
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Cellular Hacking - What exactly is it, anyway? Part II 

By Digital Thunder 



In the last issue we described some of the basics of how a 
cellular phone communicates, and gave a lengthy, but very 
complete listing of ALL the frequencies used in cellular 
communications. Now we will give some detailed information 
of just how a VALID cell call is made 

When one places a cellular call, two very important pieces of 
information are transmitted from the phone to the base; the 
Electronic Serial Number (ESN) and the Mobile Identification 
Number (MIN), These two numbers are checked by the cell 
companies computers to make sure they belong to each other, 
and that the ESN had not been "hot listed", i.e. marked as bad 
due to fraudulent use. This information, once validated, is 
used for billing purposes. 

The data is sent in Non Return to Zero (NRZ) code, which is 
also known as phase-key shifting. This is a fairly simple 
method of encoding data, similar to how data is stored on a 
magnetic disk. The data is transmitted in binary O's and 1's, 
but is not represented by the O's & 1's. Rather, the information 
is represented when the data changes from a to a 1 or vice 
versa. If the NRZ data does not change from one bit to the 
next, the actual data is a 0. If it changes from a to a 1 or from 
a 1 to a 0, the data is a 1 . 



NRZO 1110 10 



data 10 10 110 



The ESN and MIN are stored within the cell phone on two 
chips. The ESN is on a Programmable Read Only Memory 
(PROM) and the MIN is on the Number Assignment Module 
(NAM) which is basically a 32 x 8 bit PROM which can be 
programmed right on the phone handset on most phones. 
One common phone which is an exception is the OKI 900 
This chip is almost always refered to as the NAM 

The NAM contains much information which is necessary for 
proper operation of the phone. There are 32 8-bit words 
programmed on the NAM in a generally standard format, with 
each address defined for a specific purpose Refer to figure 2 
for the following definitions Note, though, that bytes 13-1D 
which are defined in the chart as not used are often used for 
manufacturers options. 



Definition 


Hex 


Contents 


PS, SIDH (bits 14-8) 


00 


XYYYYYYY 


SIDH (bits 7-0) 


01 


XXXXXXXX 


LU, MIN MARK 


02 


000000XY 


A/B, Rl, MIN2 (33-28) 


03 


XYZZZZZZ 


MIN2 (27-24) 


04 


xxxxoooo 


MINI (23-20) 


05 


ooooxxxx 


MINI (19-12) 


06 


XXXXXXXX 


MINI (11-4) 


07 


XXXXXXXX 


MINI (3-0) 


08 


xxxxoooo 


SCM (3-0) 


09 


ooooxxxx 


IPCH(10-8) 


0A 


oooooxxx 


IPCH (7-0) 


0B 


XXXXXXXX 


*CCOLC (3-0) 


OC 


ooooxxxx 


PS 


3D 


ooooooox 


GIM (3-0) 


DE 


ooooxxxx 


LOCK 1, LOCK 2 


DF 


XXXXYYYY 


LOCK 3, LOCKS 


10 


XXXXYYYY 


EE, REP 


11 


X000000Y 


HA, HF 


12 


X000000Y 


not used 


13-1D 


00000000 


checksum adjust 


1E 


XXXXXXXX 


checksum 


1F 


xxxxxxoo 



SIDH - System Identification for Home System. This is a 15-bit number 
Bits 14 and 13 are the international code bits. This is sometimes entered 
as a 5 digit decimal number when reprogramming. Note that bit 1 5 of byte 
00 is a duplicate of PS used later. 

LU - Local Use. This 1-bit flag tells the user if they must first preregister 
with the system by sending its parameters as soon as powerup tests are 
completed. Enabled with a "1". Usually enabled. 

MIN MARK - This 1-bit flag tells the phone if it must send MIN2 when 
making a call. Enabled with a "1 ". Usually enabled. 

A/B - A 1-bit flag used by AT&T, Hitachi, and Mitsubishi phones to select 
Band A or Band B use. All other models MUST be set to "0". 

Rl - A 1-bit flag used by AT&T, Hitachi, and Mitsubishi phones to select 
roaming ability; use of the phone outside it's home system area All other 
models must be set to "0". 

MIN2 - 10-bits representing the area code of the mobile ID number. 

MINI - 24-bits representing the cell phones telephone number. Combining 
MINI & MIN2 gives the MIN transmitted at the beginning of the call. 

SCM - Station Class Mark. This 4-bit field actually contains 3 different 
pieces of information. The first bit tells how many channels it can use; "0" 
= 666 and "1" = 832. The second bit is set to "0" for mobile units and to "1 " 
for voice activated transmission. The last two bits give the power class of 
the phone; "00" ■ 3 watts, "01 " = 1.2 watts, and "10"= .6 watts. "1 1 " is not 
used. 

IPCH- Initial Paging Channel for the home system. An 11-bit field. Usually 
set to 334 (decimal) for wireline and 333 for non-wireline systems Many 
phones allow other settings for "testing". 

ACCOLC - Access Overload Class. 4-bits. This basically sets the priority 
that any given phone has in the event of a system overload. Normal 
customers are set to plus the last digit of the cell phone number giving a 
range of "00" to "09" Test phones are set to "10" and emergency vehicles 
to "11*. 12-15 are reserved but are usually assigned to police, fire, and 
military users 

PS - Preferred System. 1 bit A setting of "0" designates channels 334 to 
666 (for B band systems) and a "1" designates 1 to 333 (for A band 
systems). 

GIM - Group Identification Mark. 4 bits telling the cell phone how far to look 
for it's home system if it is roaming in another system that has a roam 
agreement with the home system. Usually set to "10". 

LOCK - The lock digits are the keys to getting into the phone for 
reprogramming. A "0" is represented by "A" in the hex code. The lock code 
is only three digits so use a "0" for the first number when reprogramming 
Sometimes a code of "0000" will unlock the phone. 

EE - End to End signalling. A 1 bit field that when set tells the phone to 
transmit the DTMF tones over the voice channel as well as sounding them 
on the handset. This is usually set to "1" to allow users to access services 
like Bank by Phone and third party long distance carriers like MCI and 
Sprint. 

REP - Repertory memory. A 1 bit flag that is set to a "1" to enable speed 
dialing, a.k.a. redial. 

HA - Horn Alert. 1 bit with "1" enabling the feature 

HF - Handsfree. 1 bit with "1" enabling the feature. 

Now that you know what is programmed into the NAM, 
you need to know what types of NAMs are available 
and what will work in what type of phone. Figure 3 
contains a list of various manufacturers. 



If YOU have any 

information on cellular 

phones, SUBMIT ITU! 
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Now, before you go plugging just any old NAM chip into any 
old phone, please note that some phones require specific 
types. NEC phones will not take tri-states, they require open- 
collector. In order to use Harris or Signetics chips with a 
Fujitsu or Alpine phone, the part number must end with an "A". 
<5E Star phones cannot use Tl chips. Panasonic suggests 
using only Tl chips. 



Chip 
Manufacturer 


Open 
Collector 


Tri-state 


Signetics 


82S23 


82S123 


Texas Instruments 


74S188 
TPB18SA030 
TPB38SA030 


74S288 
TPB18S030 
TPB38S030 


AMD 


AM27LS18 
AM27S18 


AM27LS19 
AM27S19 


Harris 


HM7602 


HM7603 


MMI 


53/6330 

53/63S080 


53/6331 
53/63S081 


NSC 


DM54S188 
DM74S188 
DM82S23 


DM54S288 
DM82S123 



Ok, now for the most important part, the ESN and it's chip. 
I SNs are stored on small chips in the phone the same way the 
NAM is. The problem with ESN chips is that they are usally 
unmarked and are supposedly tamper resistant. Simply 
removing the power source, unsoldering the old chip, and 
soldering in a new one with a new ESN is almost always all 
lhat is needed to reprogram the phone. The ESN chip can be 
read with a EPROM/PROM programmer, which can often be 
used to copy or program a new ESN onto the new chip. And 
they say these things are secure!!! 

The ESN chip is either a rectangular Dual Inline Package 
(DIP) with leads on two sides, or a square Plastic Leaded Chip 
Carrier (PLCC) with leads on all four sides. The only marking 
usually found on these chips is the manufacturer name. Look 
tor the following marks on the chip: 

MMI Tl NS HARRIS 



NSC 
AMD 



MB 



DM 



HM 



MOTOROLA 



oo — 


1 


■w 


IS 


— Vcc 


Q1 — 


2 




15 


-S" 


Q2 — 


3 




14 


_ A4 


Q3 — 


4 




13 


— A3 


04 _ 


5 




12 


— A 2 


Q5 — 


6 




U 


— A1 


Q6 — 


7 




10 


— AO 


GND — 


6 




9 


— Q7 




0.2 — 4 
03-5 



04 — 

Or, — 



01 Q2 nc Vcc t7 



16 — A4 

17 — A3 



12 13 

T 



A15 — 


1 


• 28 


- 


Vcc 


A12 — 


2 


27 


— 


A14 


A7 — 


3 


26 


— 


A13 


A6 — 


4 


25 




A9 


A5 — 


5 


24 




AS 


A4 — 


6 


23 




A11 


A3 — 


7 


22 




CEA/pp 


A2 — 


8 


21 




A10 


A1 — 


9 


20 




CE 


AO _ 


10 


19 




07 


OO — 


11 


18 




06 


01 — 


12 


17 




05 


02 — 


13 


16 




04 


GND — 


14 


15 




03 
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The ESN PROM chip is programmed at the factory and usually 
has the security fuse blown to "prevent tampering". For those 
of you who are really gung-ho, here are some typical pinouts 
for these chips: 

Ok, so now you know what makes a cell phone unique, and 
how to change that uniqueness so it's not so unique, so-to- 
speak. :) Well, let's not mince words, how do you get an ESN 
and MIN pair so you can reprogram a phone to look like 
someone elses? Well, it's a little easier said than done. 
Mainly because of the equipment required. But, if you have 
the dedication, knowledge, and skills, it can be done. Using 
the master frequency list and a scanner, it wouldn't be too hard 
to listen in on the data channels. Then you would need to NRZ 
decode the signal, which could be fairly easy since all cell 
phones have NRZ transmission and reception circuitry built in. 

The ultimate system would be to have a scanner/decoder 
setup with a computer that is constantly scanning the data 
channels for valid information and storing it away. When a call 
is placed, the computer automatically, and randomly, selects 
one of the ESN/MIN pairs and uses it, then marks it as used so 
it doesn't get used again. 

There is also another way one could obtain ESN/MIN pairs. 
All cell phone companies keep records for themselves of all 
the phones they service and sell. What's to say some 
unscrupulous employee isn't willing to sell this information? 

If there is anything that this and last issues articles prove, it's 
that there is no such thing as a secure communications 
system. A secure system COULD be made, but it would be so 
impractical that I doubt it would ever happen. 

Happy roaming! 



Questions or 

comments about this 

product? 

Call Toll Free 
1-800-ESN-HACK! 
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YOU AND THE UNIFORM COMMERCIAL CODE (UCC) 

By Robert Cohen 



The United States of America is made up of two distinct legal systems. One is the common law and the other is the Kings 
Law The Kings law has its source in the Constitution for the united States of America in Article 1 , Section 8, Clause 17 where 
Congress has the power of exclusive legislation whatsoever but this area is limited to Washington, DC. and five other 
territories which are Puerto Rico, Virgin Islands, Northern Mariana Islands. Guam and American Samoa. U.S. possessions, 
and enclaves are within the sovereign states and these areas were ceded to the federal government by the states. These are 
the areas where the United States is King, this is also where the Uniform Commercial Code operates. In the fifty sovereign 
states, We the People and our Posterity are the sovereignty All 14th amendment US citizens are also subject to the Uniform 
Commercial Code wherever they are. 

In the common law, contracts must be entered into consciously, with understanding and knowledge of alternatives aid 
voluntarily to be valid Under the Uniform Commercial Code there are also implied contracts which are also binding on US 
citizens or residents To be a 14th amendment citizen or person is to bind oneself to all manner of implied contracts. The UCC 
is also based on presumptive law and a right is considered waived if not explicitly reserved. The Uniform Commercial Code is 
presumed to supplant the common law unless the common law is explicitly reserved when signing contracts The monetary 
unit of the Uniform Commercial Code is the federal reserve note or unit (FRUs). Transactions entered into with FRUs are also 
UCC transactions Things paid for with FRUs are debts discharged with limited liability and bring one within the jurisdiction of 
the Uniform Commercial Code unless the common law is reserved in writing. 

The Uniform Commercial Code supplants the common law unless the remedy and recourse is exercised when entering 
any agreement with your signature. The Uniform Commercial Code remedy to the common law is UCC 1-207 which says "A 
party who with explicit reservation of rights performs or promises performance or assents to performance in a manner 
demanded or offered by the other party does not thereby prejudice the rights reserved. Such words as 'without prejudice', 
'under protest' or the like are sufficient." The Uniform Commercial Code recourse to the common law is UCC 1-103.6 which 
says 'The Code is complimentary to the Common Law, which remains in force, except where displaced by the code. A statute 
should be construed in harmony with the Common Law unless there is a clear legislative intent to abrogate the Common 
Law THE CODE CANNOT BE READ TO PRECLUDE [PREVENT OR EXCLUDE] A COMMON LAW ACTION." 

Your drivers license agreement classifies you as a California resident and it is presumed that you have waived your 
constitutional right to travel as a sovereign. It is best for sovereigns to renounce their drivers license and use another form of 
positive identification and I will have more information on that in future issues. If you want to reserve your rights under the 
common law while traveling and still retain your license add to your license above your signature "All Rights Reserved Without 
Prejudice UCC 1 -207 & UCC 1 -1 03 6 " This will force the policeman and the traffic court judge to interpret their code violation 
consistent with the common law If the policeman is informed that his charge is invalid unless he has a victim and a verified 
complaint which the common law requires, he may think twice about giving you that ticket If he in informed and does not have 
a victim and verified complaint and gives you a ticket anyway you can under UCC 3-505 require him to produce the hidden 
contract which you signed creating a liability and reasonable identification such as his employee identification card, drivers 
license, social security number. 

Unless you accept payment of your goods and services with gold and silver coin, you have not been lawfully paid for your 
goods and services You are accepting a forced benefit when you accept federal reserve notes or units (FRUs) for your goods 
and services When paid with FRUs you are letting your customers or employers discharge their debt with limited liability. By 
accepting this benefit without reserving your rights without prejudice you are placing yourself under the jurisdiction of the UCC 
and its admiralty and legislative courts jurisdiction. To make all your transactions common law transactions write on all checks 
you receive and deposit "All Rights Reserved Without Prejudice UCC 1-207 & UCC 1-103.6." On all checks you write above 
your signature write "All Rights Reserved Wthout Prejudice UCC 1-207 & UCC 1-103.6." This reservation says that you do 
not recognize the forced benefit of receiving FRUs in place of gold and silver coin as payment for your goods and services. 

Under the Uniform Commercial Code an unrefuted claim stands as truth. If you should get a notice from the IRS and you 
ignore it and do not refute their claim within 72 hours, their claim will now stand as truth. A letter from the IRS assumes that 
you are a 14th amendment subject to its jurisdiction US. citizen and that you earned income within the corporate United 
States If you ignore such a letter, you have just agreed that they are right If you are conceived in one of the fifty sovereign 
states, you are not the citizen defined in the Internal Revenue Code. If you are not a federal government employee your 
compensation is the fruit of your labor, your property and is not a gain separated from capital and therefore not income and 
not wages If you get a letter from the IRS it probably is the result of you giving an employer a W4, your social security number 
which made your employer think you were a U.S. citizen and your employer sent you and the IRS a W2 reporting your 
compensation as wages. To the sovereign citizen the income tax is voluntary. 

You can refute the IRS claim that you are required to pay an income tax and file a tax return. If you stop filing which is your 
right even as a U.S. citizen because of the voluntary nature of the income tax and the IRS misses you and demands you file 
or pay a tax, you can within 72 hours refute this claim by 1> deny that you are required to file and do not owe the stated 
amount or any other amount. 2> I am not the citizen defined in the Internal Revenue Code and a nonresident alien in the 
internal revenue code which makes me a non-tax payer. 3> I am not a federal government employee and therefore do not 
earn taxable wages I also did not receive any income from any area connected to the corporate United States. If you are a 
citizen of one of the 50 states & working in one of the 50 sovereign states, your compensation is Eisner v. Macomber (1920) 
non-taxable compensation earned without the corporate United States and not subject to the income tax. 4> My compensation 
is earned without the United States and not subject to U.S. Income Tax. 5> Give the IRS 30 days to refute your four claims 
and tell them failure to refute these claims within 30 days means their claim is refuted Wthout Dishonor and to close your 
account and failure to respond in a timely manner means my case is closed. 

If you should get a bill from any creditor and it is incorrect or invalid, if you fail to refute it within 72 hours, under the UCC 
that bill stands as truth even if in fact it is invalid. If you refute the validity of the bill and give valid reasons with your refutation, 
you have put the burden of proof on the creditor to prove its validity. In many cases the creditor just gives up and you may 
never hear from them again. I once got an invalid bill for nine months before I understood the UCC and they threatened to go 
to a collection agency. Once I refuted the bill and told them why it was invalid I never heard from them again and the matter 
was dropped. 

Note: This article was reprinted from Freedom and Sovereign Technology Volume 1, Issue 5 with 
permission. 
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Blacklisted! Abbreviation Listing (A -C) 



In this issue, we will start with our HUGE listing of common abbreviations used in the areas we tend to write about. 
We could only fit abbreviations through C's in this issue. We'll put some more in the next exciting issuel If you ever 
have any additions to this list, please fax them to us, write us a letter, call us, etc. P.S. This was a submission! Do 
we all know what THAT means? WE DID NOT WRITE THIS. Hell, something similar was probably already printed 
somewhere else before we got ahold of this. Anyhow, the acronyms on the following pages are VERY useful! Enjoy! 

Attempt per circuit per hour 

Answer controller interface (IOM2 monitor command) 
Asynchronous communications interface adapter 
Acknowledge 
No acknowledgement wink 
No acknowledgement wink (MDH) 

Acknowledgement database 
Address complete msg. (SS7: in ISUP) 
Attendant control of facilities 
Action point 
Association control service element 

Acedemic computing services network 
Automatic customer station rearrangement 
Advanced T-1 channel service unit 
AC Testing definition 
AC testing definition 
Activate 
Active 

Auto or automatic circuit transactions 
Automated coin toll service 
Acticated 
Activated 
Alarm control unit 
Automatic calling unit 
Attendant INTER/TRA blocal 1-26 
Audix data acquisition package 
Advanced directory assistance system 
American digital cellular 
Analog to digital converter 
Advanced data communication controll procedure 
Advanced data communications control procedure 
Automatic display call indicator 

Address expander 
Additional 

Address translations 
Ajust 

Add-drop multiplex 
Advanced DMA controller SAB82258 
Abbreviated dialing number 
Automatic diagnostic process. 

Adaptive PCM 
Administration of designed services 
Administration of designed services review 
Advanced digital system 
Audio distribution system 
Auxilary data system 
Asymmetrical digital subscriber line 
Automated digital terminal system 
Automatic data test system 
Automatic digital terminal system 
Automatic dialing unit 
Alignment error rate monitor 
Commercial audio fulltime INTER/TRA blocal 1-26 
Automatic facilities test system 
Automatic force adjustment data system 
Analog front end 

Authority and format identifier (ISO 7498) 
Advanced features service center 
Automatic frequency shift keying 

Above ground electronic equipment enclosures 
Automatic gain control 
Normal aging months 
Analog ground 
Accelerated aging type 
Activate indication (C/l channel code) 
Artificial intelligence 
Assignees initials 

Automatic identified outward dialing INTER/TRA blocal 1-26 
Automatic intercept center 
Automatic intercept communications controller 
Advanced intelligent network 
Automatic id of outward dialing 
Automatic identifaction of outward dialing 
Alarm indication signal 
Alarm indication signals 
Automatic intercept system 
Analit initialization of tables 
Al upstream 

Alternate services INTER/TRA blocal 1-26 
Automatic loop access system system (DDS service) 
Automatic line buildout 
Address latch enable 
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ISM 


Fifteen minutes 


ACH 


IBS 


Fifteen seconds 


ACI 


1CF 


Singal party coin first pay phone 


AC I A 


1FAC 


Interface packs 


ACK 


IFB 


One party flat business rate 


ACK 


10F 


One party official (telco) business line 


ACK 


2SPDT 


Partial dial timeout in the second stage of a traditional 


ACKDB 




2-stage international 


ACM 


2SPST 


Permanent signal timeout in the second stage of a traditional 


ACOF 




2-stage international 


ACP 


2 SVC A 


Vacant code in the second stage of a traditional 2-stage 


ACSE 




international outbound 


ACSNET 


2W 


Two wire (pair) (circuit) 


ACSR 


2WAY 


Two-way trunk gioups 


ACSU 


300 


Log command menu (SARTS command) 


ACT 


17* 


Log clear (SARTS command) 


ACT 


<R4 


Write log (SARTS command) 


ACT 


>.«■> 


Read log (SARTS command) 


ACT 


399 


Log print (SARTS command) 


ACT 


3KHZ 


Three kilohertz 


ACTS 


3RNGR 


Three ringer 


ACTV 


3WO 


Third wire open 


ACTVD 


■tw 


Four wire (pair) (circuit) 


ACU 


BOO 


Test menu (SARTS command) 


ACU 


BOOB 


600-ohm briged connection 


AD 


Ml 


Detail tests (SARTS command) 


ADAP 


621 


Macro command menu (SARTS command) 


ADAS 


B31 


Automatic test command (SARTS command) 


ADC 


MOT 


735-ohm compromise termination 


ADC 


■'A 


Action field contains an error 


ADCCP 


'0 


Data field contains an error 


ADCCP 


?E 


Error exist in the message but can ot be resolved to the 


ADC I 




proper field 


ADD EXP 


7I 


Identification field contains an error 


ADDL 


7T 


Time-out has occured on channel 


ADDR 


'W 


Warning message 


ADJ 


A 


A side (lead) (pair) 


ADM 


A 


Area 


ADMA 


A 


Telephone number or trunk group and member number from 


ADN 




trouble 


ADP 


A/B 


Two wire phone connection (T&R) 


ADPCM 


AA 


Automatic answer 


ADS 


AA 


Packet analog access line INTER/TRA blocal 1-26 


ADS 


AABS 


Automatic alternate billing service 


ADS 


AAE 


Auxiliary access equipment 


ADS 


AAR 


Automatic alternate routing 


ADS 


'sAX 


Automated attendant exchange 


ADSL 


AB 


Packet switch trunk INTER/TRA blocal 1-26 


ADTS 


ABATS 


Automatic bit access test system 


ADTS 


ABATS 


Automatic bit access test system (DDS service) 


ADTS 


ABC 


Automatic bill calling (TSPS) 


ADU 


ABF 


Abandon failure 


AERM 


ABF 


Abandon failure (MDH) 


AF 


ABHC 


Average busy hour calls 


AFACTS 


ABL 


Auxiliary Buffer Oder word Left half 


AFADS 


ABM 


Asynchronous balanced mode ( -> SABME) 


AFE 


ABME 


ABM extended 


AFI 


ABR 


Auxiliary Buffer order word Right half 


AFSC 


ABS 


Alternate billing service 


AFSK 


ABS 


Alternative billing service 


AG/EEE 


ABSBH 


Average busy season busy hour 


AGC 


ABT 


Abort 


AGM 


ABV 


Above 


AGND 


AC 


Administrative computer 


AGT 


AC 


Alternating current 


Al / 


AC 


Assembly code 


Al / 


ACA 


Asynchronous communication adapter 


Al / 


ACB 


Annoyance call bureau 


Al / 


ACB 


Automatic call-back 


AIC 


ACC 


Audio communications controller 


AICC 


ACCS 


Automated calling card service 


AIN 


ACD 


Automatic call distribution 


AIOD 


ACD 


Automatic call distributor 


AIOD 


ACDA 


Automatic call disposition analyzer 


AIS 


ACDN 


Access Directory Number 


AIS 


ACDN 


Access directory number 


AIS 


ACE 


Assignment change establish 


AIT 


ACE 


Automatic calling equipment 


AIU 


ACES 


Arts cabs entry system 


AL 


ACF 


Advanced communications functions 


ALATS 


ACFA 


Advanced CMOS frame aligner peb2030 


ALBO 


ACG 


Automatic call gap 


ALE 
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ALE Automatic line evaluation 

ALFE Analog line front end 

ALGOL Algorhythmic computer language 

ALI Automatic location indentification 

ALIT Automatic line insulation testing 

ALL All events 

ALL All module controller maintenance interrupts 

ALL Turns on all IDs 

ALPT Alarm scan points 

ALRM Alarms 

ALRU Automatic line record update 

ALS Automated list service 

AM Administrative module 

AM Amplitude modulation 

AM Asynchronous multiplexer 

AM Packet 

AMA Automatic Message Accounting 

AMA Automatic message accounting 

AMACS AMA collection system 

AMAIRR Automatic message accounting irregularity 

AMALOST Lost automatic message accounting 

AMARC AMA recent change 

AMARC AMA recording center 

AMASE AMA standard entry 

AMAT Automatic message accounting transmitter 

AMATPS Automatic message accounting teleprocessing system 

AMATPS Automatic message accounting transmitter teleprocessing 

system 
AMC Add-on module connector (-> sipb) 

AMERITECH Amencan information technologies 

AMI Alternate mark inversion code 
AML Automatic maintenance limit. 

AMP Advance measurement processor 

AMP Amplifier 

AMPS Advanced mobile phone service 

AMR Automatic meter reading 

AMWI Active message waiting indicator 

AN Announcement service INTER/TRA blocal 1-26 

AN Associated number 
ANA Automatic number announcement 

ANC All number calling 

ANCT Analysis control table 

ANI Automatic number identification 
ANIF Automatic number identification failure 

ANM Answer msg. (SS7: in ISUP) 

ANS Answer 

ANS Answer On Bus 

ANS Answer msg. 

ANSER AT&T Network Servicing System (i.e. via EADAS link ) 
ANSI American national standards institute 

AO Allocation order 

AO International/overseas audio (full time) INTER/TRA blocal 1-26 
AOC Advice of charge (i.256 B) 

AOSS Auxilliary operator service system 

AP Access point 

AP Application (OSI layer 7) 

AP Application processor 

AP Attached processor 

AP Auciliary processor 

AP Automatic position 

AP Commercial audio (part time) INTER/TRA blocal 1-26 
AP-PG Access point page 
APC Alarm processor circuit 

APC Amarc protocol converter 

APD Access point data 

APD Avalanche photo diode 

APDB Access point data base 

APDL Application processor data link 

APH Application protocol handler 

API Application interface 
APM Application processor modules 

APPC Advanced program to program communication (IBM) 

APPL1-APPL5 Reserved for application handlers 
APS Automatic position system 

APS Automatic protection switch 

APS Automatic protection switching system 

AQ Autoquote problem. 

AR Activation request (C/l channel code) 

AR Alarm report 

AR01 Office alarm - 1AESS alarm message 

AR02 Alarm retired or transferred - 1 AESS alarm message 

AR03 Fuse blown - 1AESS alarm message 

AR04 Unknown alarm scan point activated - lAESS alarm message 

AR05 Commercial power failure - 1AESS alarm message 

AR06 Switchroom alarm via alarm grid - 1AESS alarm message 

AR07 Power plant alarm - 1AESS alarm message 

AR08 Alarm circuit battery loss - 1AESS alarm message 

AR09 AMA bus fuse blown - 1AESS alarm message 

AR10 Alarm configuration has been changed (retired inhibited) 

AR1 1 Power converter trouble - 1 AESS alarm message 

AR13 Carrier group alarm - 1AESS alarm message 

AR15 Hourly report on building and power alarms - 1 AESS alarm 



message 

ARA Automatic reservation adjustment 

ARC Administrative responsibility code 

ARC Alternate route cancellation 

ARC Alternate route cancellation control 

ARC Audio response controller 

ARCOFI Audio ringing codec filter 
ARCOFI-SP ARCOFI + speakerphone function 

ARCOS ARCOFI coefficient support program 

ARCOTI SIPB telephone module 

ARD AR downstream 

ARG Alarm reference guide 

ARG Assemble and run a given master file 

ARIS Audichron recorded information system 

ARL Activation request local loop (C/l channel code) 

ARM Activation request maintenance (C/l channel code) 

ARM Asynchronous response mode 

ARM Automatic Rfemote test system) maintance 

ARMAR Automatic request for manual assistance resolution 

ARN Activation request 

ARQ Automatic repeat request 

ARR Automatic ring recovery. 

ARS Alternate route selection 

ARS Automatic route selection 

ARSB Automated repair service bureau 

ARSB Automatic repair service bureau 

ARSSI Automatic rought selection screening index 

ART Audible ringing tone 

ARU Activation request upstream 

ARU Audio response unit 

ASAP As soon as possible 

ASC Alarm and status circuit 

ASC Alarm and status circuit . 

ASC Alarm surveillance and control 

ASCC2 Advanced serial communication controller 

ASCII American standard code for information interchange 

ASCII American standard code for information interexchange 

ASD Automated SMAS diagnostics 

ASDPE Synchronous data link controller (SDLC) A reset 

ASE Application service element 

ASEC Assignment section 

ASGN Assign 
ASGNMTS Assignments 

ASIC Application specific integrated circuit 

ASM Analog subscriber module 

ASOC Administrative service oversight center 

ASP Advanced service platform 

ASP Arcofi signal processor 
ASPACGCOMP ASP SCP response message with an ACG component 

received at the switch 
ASPBADRESP ASP SCP response message received with invalid data 

ASPEN Automatic system for performance evaluation of the network 
ASPNORTEMSG ASP reject message ret err and a play announc recei 

at the switch from the SCP 
ASPSNCOMP ASP SCP response message with a send notifi 

component received at the switch 
ASPTNMSG ASP termination notification message sent from the 

switch to the SCP 

ASR Access service request 

ASSN Assignment 

AST Position acknowledge seizure signal time-out (MDII) 

ASYNC Asynchronous 

AT Access tandem 

AT International/overseas audio (part time) INTER/TRA blocal 1-26 

AT&T American telephone and telegraph 

AT-1 Auto test- 1 

AT-2 Auto test-2 

AT01 Results of trunk test - 1 AESS automatic trunk test 

ATA Automatic trunk analysis 

ATAB Area trunk assignment bureau 

ATAI Automatic troubler analysis interface 

ATB All Trunks Busy 

ATB All trunks busy 

ATC Automated testing control 

ATC Automatic transmission control 

ATD Accept date 

ATD Async. TDM 

ATH Abbreviated trouble history 

ATI Automatic test inhibit 

ATI Awake Tl 

ATICS Automated toll integrity checking system 

ATIS Automatic transmitter identification system 

ATM Analog trunk module 

ATM Asynchronous transfer mode 

ATM Automatic teller machine 

ATMS Automated trunk measurement system 

ATN Assignees telephone number 

ATO Time-out waiting for address complete signal 

ATP All tests pass 

ATR Alternate trunk routing 

ATRS Automated trouble reporting system 

ATTC Automatic transmission test and control circuit 
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ATTCOM AT&T communications 

ATTG Attendant group 

ATTIS AT&T information system 

AU Access unit 

AU Autoscript INTER/TRA blocal 1-26 

AU Auxiliary 

AUD Assignment list audit 

AUD Audits 

AUDIT Audit detected problem 

AUDIX Audio information exchange 

AUP Access unit port 

AUTO Automaitc 

AUTODIN Automatic digital network 

AUTOSEVCOM Automatic secure voice communications 

AUTOVON Automatic voice network 

AUXF Auxiliary frame 

AVD Alternate voice data 

AVD Alternate voice-data 

AWI Awake indication 

AZD All zeros data 

B B side (pair) (lead) 

B Bridged connection 

B Equipment number 

B6ZS Bipolar with 6 zero subsitution 

B8ZS Bipolar eight zero suppression encoding (DS-1) 

B8ZS Bipolar with 8 zeros substitution (T1 pri) 

B911 Basic 911 

BA Basic access 

BA Protective alarm (CD) INTER/TRA blocal 1-26 

BAF Blocking acknowledgment failure 

BAI Bridge lifter assignment inquiry 

BAL Balance 

BAMAF Bellcore AMA format 

BANCS Bell administrative network communications system 

BANKS Beil adminastration network systems 

BAPCO Bellsouth advertising & publishing company 

BAS Basic activity subset 

BAT Battery (-48v) 

BAx Business address x (x = number of line) 

BB Blue box 

BBDO/1 Binary Os or 1s detected in b and d channels 

BCC Bellcore client companies 

BCC Block check character 

BCC Blocked call cleared 

BCCP Bearer ccp 

BCD Binary coded decimal 

BCD Blocked call delayed 

BCFE Busy call forwarding extened 

BCID Business customer identifier 

BCLID Bulk calling line identification 

BCMS Basic call management system 

BCS Batch change supplement (NTI) (DMS-100) 

BDCA Unk 

BDCS Broadband digital cross-connect system 

BDS Basic data service 

BDT Billing data transmitter 

BEF Band elimination filter 

BEL Bell 

BELLCORE Bell communications research 

BER Bit error rate 

BERT Bit error rate test 

BETRS Basic exchange telecommunications radio service 

BG Battery and ground signaling 

BG/EEE Below ground electronic equipment enclosuies 

BHC Busy hour call 

BHC Busy hour calls 

BIB Backward indicator bit (SS7) 

BICU Bus interface control unit 

BIFIFO Bidirectional fifo 

BIR Bit receiver 

BIR Bus interface register 

BISDN Broadband ISDN 

BISP Business information system program 

BISYNC Binary synchronous communications 

BIT Bit 

BIT Bit transmitter 

BITNET Because-it's-time network 

BITR Bit transceiver 

BIX Building internal cross-connects 

BK Back 

BKUP Backup 

BKUP Requests a backup 

BL Bell & lights INTER/TRA blocal 1-26 

BL Bridge lifter 

BL Bridge lifters - COSMOS command 

BUDS Busy line/don't answer 

BLA Blocking acknowledgement (SS7: in ISUP) 

BLF Busy line field 

BLFCA Blocking a fully coded addressed international outbound call 
routed to a non-common channel signaling trunk 

BLK Block 

BLKD Blocked 



BLO Blocking (SS7: in ISUP) 

BLS Bridge lifter status 

BLS Business listing service 

BLV Busy line verification 

BMC Billing media coverage 

BMD Batch mode display 

BMI Batch mode input - TIMEREL and DEMAND 

BMOSS Building maintance operations service system 

BMR Batch mode release 

BMU Basic measurement unit (dip) 

BND Band number 

BNS Billed number screening 

BNSDBOV BVA BNS message received indicating data base overload 

BNSDBUN BVA BNS message returned because data base unable to 

process 
BNSGMSG BVA BNS message received garbled 
BNSNBLK BVA BNS message returned because of network blockage 
BNSNCON BVA BNS message returned because of network 

congestion 
BNSNRTE BVA BNS message returned because of no routing data 
BNSTOUT BVA BNS message returned because of timeout 
BNSUNEQ BVA BNS message returned because of unequipped 

destination 
BNSURPY BVA BNS message received with an unexpected reply 
BNx Business name x (x = number of line) 

BOC Bell operating companies 

BOC Bell operating company 

BOCC Building operations control center 

BOP Byte oriented protocol 

BOR Basic output report 

BORSCHT Battery 
BOS Bit oriented signaling 

BOS Business office supervisor 

BOSS Billing and order support system 

BOSS Business office service system (NYNEX) 

BOT Beginning of tape 

BOT Bottom 

BPI Bits per inch 

BPOC Bell point of contact 

BPS Bits per second 

BPSK Binary psk 

BPSS Basic packet-switching service 

BPUMP Backup pump 

BR Bit robbing (CAS-BR) 

BRAT Business residence account tracking system 

BRCF Business and residential customer service feature 

BRCS Business and residential customer services 

BRCS Business residence custom service 

BRDCST Broadcase 
BRDG Bridge 

BRDGD Bridged 

BREVC Brevity control 

BRG Baud rate generator 

BRI Basic rate interface 

BRITE Basic rate interface transmission extension (5ESS) 

BRK Break 

BRM Basic remote module 

BRM Bell communications research practice 

BRST Bridge signature table 

BS Backspace 

BS Banded signaling 

BS Bias battery (-19 1v) 

BS Siren control INTER/TRA blocal 1-26 

BSA Basic serving arrangements 

BSBH Busy season busy hour 

BSC Business service center 

BSC/RSC Business/residence service center 
BSCM Bisynchronous communications module 

BSDPE SDLC B reset 
BSE Basic service elements 

BSF Bell shock force 

BSI British standards institution 

BSN Backward sequence number (SS7) 

BSOC Bell systems operating company 

BSP Bell system practice 

BSRF Basic standard reference frequency 

BSRFS Bell system reference frequency standard 
BST Basic services terminal 

BSTJ Bell system technical journal 

BT British telecom 

BTAM Basic telecommunications access message 

BTH Both 

BTL Bell telephone laboratories 

BTN Billing telephone number 

BTSR Bootstrapper board 

BTU British thermal unit 

BUFF System buffers (NTI) 

BVA Billing validation application 

BVAPP Billing verification and authorization for payment process 
BVC Billing validation center 

BVS Basic voice service 

BWM Broadcast warning message 
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BWT Broadcast warning twx 

BWTS Bandwidth test set 

BYF Display the bypass file 

BYP Change the contents of the bypass file 

C Counting rate 

C Current supervision 

C Scan point (SP) 

C&A Centrifugal and absorption 

C-ACD Commercial-automatic call distributor (OSPS) 

C-NCH C-notch 

C/l Command/indicate 

C/S UNIT Combiner and splitter 

C1 Circuit system 

CA Cable 

CA Cable number 

CA Collision avoidance 

CA SSN access INTER/TRA blocaM -26 

CABS Carrier access billing system 

CAC Calling-card authorization center 

CAC Carrier access code 

CAC Circuit administration center 

CAC Customer administration center 

CACHE Cache errors 

CAD Computer-aided dispatch 

CAD Critical alarm display 

CADN Circuit administration. 

CADV Combined alternate data/voice 

CAF Circuit reset acknowledgment failure 

CAFD Comptrollers' automatic message accounting format 

description 

CAFD Controllers automatic message accounting format description 

CAI Address incomplete received 

CAI Call assembly index 

CAIS Colocated automatic intercept system 

CALRS Centralized automatic loop reporting system 

CAM Communication access method 

CAM Computer aided manufacturing 

CAM Content adressable memory 

CAM Control administration module 

CAMA Central automatic message accounting. 

CAMA Centralized auto message accounting 

CAMA Centralized automatic message accounting 

CAN Cancel 

CANC Cancel (i451) 

CANF Clear the cancel from 

CANT Clear the cancel to 

CAP Capacitance 

CARL Computerized administrative route layout 

CAROT Centralized automatic reporting on trunks 

CAROT Centralized automatic reporting on trunks. 

CAS Cannel associated signaling 

CAS Circuit associated signaling 

CAS Computerized autodial system 

CAS Craft access system (SARTS) 

CAS Customer account service 

CAS7ABM CAS common channel signaling 7 (CCS7) abort message 

received 

CAS7ACG CAS CCS7 ACG invoke component received 

CAS7GMG CAS CCS7 received with invalid format reply 

CAS7GWE CAS CCS7 error 

CAS7NCG CAS CCS7 message returned because of network 

congestion 

CAS7NFL CAS CCS7 message returned because of network failure 

CAS7RCR CAS CCS7 reject component received 

CAS7SCG CAS CCS7 message returned because of subsystem 

congestion 

CAS7SFL CAS CCS7 message returned because of subsystem failure 

CAS7TAN CAS CCS7 message returned 

CAS7TOT CAS CCS7 query which timed out before reply received 

CASDBOV CAS message received indicating data base overload 

CASDBOV Customer account services (CAS) message received 

indicating data base overload 

CASDBOV Customer account services (CAS) message received 

indicating database overload 

CASDBUN CAS message returned 

CASGMSG CAS message received garbled 

CASNBLK CAS message returned because of network blockage 

CASNCON CAS message returned because of network congestion 

CASNRTE CAS message returned because of no routing data 

CASTOUT CAS message returned because of timeout 

CASUNEQ CAS message returned because of unequipped destination 

CASURPY CAS message received with an unexpected reply 

CAT Centrex access treatment 

CAT Craft access terminal 

CATLAS Centralized automatic trouble locating and analysis system 

CAY Create an assembly 

CB OCC audio facilitys INTER/TRA blocal 1 -26 

CBA Change back acknowledgement (SS7: in mtp) 

CBD Change back declaration (SS7: in mtp) 

CBEMA Computer and business equipment manufacturers' assc 

CBERR Correctable bit error 

CBS Crossbar switching 



CBX Computerized branch exchange 

CC Call count 

CC Central control 

CC Central controller 

CC Common channel (CAS-CC) 

CC Common control 

CC Connection confirm 

CC Country code 

CC Country code (ISO 7498) 

CC Initials of person closing report out to catlas 

CC OCC digital facility-medium speed INTER/TRA blocal 1-26 

CC1 Call control 1 (IOS) 

CCA Change customer attributes 

CCA Computer content architecture (ISO 8637/2) 

CCBS Completion of call to busy subscribers (i.253 c) 

CCC Centeral control complex 

CCC Central control complex 

CCC Clear channel capability 

CCC Computer control center 

CCD Change due date - COSMOS command 

CCDDBOV BVA calling card (CCRD) message received indicating data 

base overload 

CCDDBUN BVA CCRD message returned because data base unable 

to process 

CCDGMSG BVA CCRD message received garbled 

CCDNBLK BVA CCRD message returned because of network 

blockage 

CCDNCON BVA CCRD message returned because of network 

congestion 

CCDNRTE BVA CCRD message returned because of no routing data 

CCDR Calling card 

CCDTOUT BVA CCRD message returned because of timeout 

CCDUNEQ BVA CCRD message returned because of unequipped 

destination 

CCDURPY BVA CCRD message received with an unexpected reply 

CCF Custom calling features 

CCH Connections per circuit per hour 

CCIR Comite' consultant international des radio communications 

CCIR Consultative committee for radiocomunication (international 

radio 

CCIS Common channel interoffice signaling 

CCITT Comite' consultatif international telegraphique et telephonique 

CCITT Consultative committee for intemat. telephone and telegraph 

CCM Customer control management 

CCNC CCS network control 

CCNC Common channel network controller 

CCNC Computer/communications network center 

CCOA Cabinet control and office alarm 

CCP Call control part 

CCR Clock configuration register 

CCR Continuity check request (SS7: in ISUP) 

CCR Customer-controlled reconfiguration 

CCRC Corrupt crc (IOM2 monitor command) 

CCRD Calling card (5E) 

CCRS Centrex customers ... system 

CCS Centum Call Seconds 

CCS Cluster support system 

CCS Common channel signaling 

CCS Custom calling services (NTI) 

CCS Hundred (C) call seconds 

CCS Hundred call seconds 

CCSA Common control switching arrangement 

CCT Central control terminal 

CCT Initialize and update the contractor-transducer file 

CCTAC Computer communications trouble analysis center 

CCU Colt computer unit 

CCU Combined channel units 

CCU Communication control unit 

CCV Calling card validation 

CD Call deflection (i 252 e) 

CD Collision detection (->csma/) 

CDA Call data accumulator 

CDA Change distribution attributes 

CDA Coin detection and announcement 

CDACS Concentrating DACS 

CDAR Customer dialed account recording 

CDC Central distrubtion center 

CDCF Cumulative discounted cash flow 

CDD Change due date 

CDF Combined distributing frame 

CDF DTF coin 

CDFI Communication link digital facilities interface 

CDI Circle digit identification 

CDI Connected line identification (i.251 C/E) 

CDI Control and data interface 

CDI Control data interface 

CDIG Circle digit translation (NTI) 

CDM Coax data module 

CDMA Code division ma 

CDO Community dial office 

CDPR Customer dial pulse receiver 

CDQ1 Custom calling services discount quote 
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CDR Call detail record 

CDR Call dial rerouting 

COR Collision detect input line 

CDR Cut thru dip report 

CDRR Call detail recording and reporting 

CDS Circuit design system 

CDS Codes 

CDS Craft dispatch system 

CE Collision elimination (->CSMA/) 

CE Common equipment data (NTI) 

CE Conducted emission (EME) 

CE SSN station line INTER/TRA blocal 1-26 

CEF Cable entrance facility 

CEI Comparable efficient interconnection 

CEI Comparably efficient interconnection 

CEN European committee of standards 

CENELEC European committee of standards (electrotechnics) 

CEP Connection endpoint 

CEPT European conference of post/telecom administrations 

CES CC error summary 

CEU CCS estimated usage 

CEV Control environmental vault 

CEV Controlled environment vautt 

CF Coin first 

CF OCC special facility INTER/TRA blocal 1-26 

CFA Carrir failure alarms 

CFA Change facility attributes 

CFC Cost function code 

CFCA Communications fraud control association 

CFD Coinless ANI7 charge-a-call 

CFGN Configuration 

CFI Configurable interface (SIPB) 

CFINIT Custom calling feature table 

CFN Call forward number 

CFND Call forward number don't answer 

CFNR Call forwarding no reply (i.252 c) 

CFP Call forwarding busy (i.252 b) 

CFP Print the class of service/features for an electromechanical 

enti 

CFR Code of federal regulations 

CFT Craft 

CFU Call forwarding unconditional (i.252 d) 

CFU Change facility usage 

CG Control group number 

CG OCC telegraph facility INTER/TRA blocal 1-26 

CG01 Carrier group in alarm - 1AESS carrier group 

CG03 Reason for above - 1 AESS carrier group 

CGA Carrier group alarm 

CGA Carrier group assignment 

CGAP Call gapping 

CGAP Call gapping code controls messages. 

CGB Circuit group blocking (SS7: in ISUP) 

CGBA CGB acknowledgement 

CGM Computer graphics metafile (ISO DIS 8632) 

CGN Concentrator group number 

CGNC Connector group network controller 

CGU Circuit group unblocking (SS7: in ISUP) 

CGUA CGU acknowledgement 

CH Change 

CH OCC digital facility high-speed INTER/TRA blocal 1 -26 

CHAN Channel 

CHAPS UNK - a known AT&T System - def. unknown 

CHAR Character 

CHG LASG Change loop assignment 

CHK Check 

CHR Chronical 

CI Concentrator identifier trunk INTER/TRA blocal 1 -26 

CIOIN Control interface interrupt 

CHIN Control interface 1 interrupt 

CIB Centralized intercept bureau 

CIC Carrier identification codes 

CIC Circuit identification code 

CIC Customer Information Center (AT&T) 

CICS Customer information control system 

CID Connection identification 

CIE Company establish company initiated change 

CIF Common intermediate format (for ISDN high end video) 

CIH Craft interface handler 

CM Call identity index 

CH Initial address message (IAM) irregularity (incoming) 

CIMAP Circuit installation and maintance assistance program 

CIMAP/CC Circuit installation and maintenance assistance/control 
center 

CIP Control interface port 

CIRR C/l receive register 

CIS Crimeline information systems 

CIS Customized intercept service 

CIXR C/l transmit register 

CJ OCC control facility INTER/TRA blocal 1 -26 

CK Checkbits 

CK OCC overseas connecting facility wide-band INTER/TRA blocal 

1-26 



CKF Continuity check failure (incoming) 

CKID Circuit identification 

CKL Circuit location 

CKS Clock select bit 

CKT Circuit 

CKT Circuit. 

CKTRY Cuicuitry 

CL Centrex CO line INTER/TRA blocal 1-26 

CLASS Centralized local area selective signaling 

CLASS Custom local area signaling service 

CLC Common language code for an entity 

CLCI Common language circuit identification 

CLCT Network management control counts 

CLDIR Call direction 

CLDN Calling line directory number 

CLEI Common language equipment identifier 

CLF Creating dips upper bound load factor 

CLFI Common lang facilities identication 

CLI COSMOS processed alit reports 

CLI Calling line ident 

CLID Calling line identification 

CLIP Calling line identification presentation (i.251 c) 

CLIR Calling line identification restriction (i.251 d) 

CLK Clock 

CLL Creating dips lower bound load factor 

CLLI Common-language location identification 

CLNK Communication link 

CLNKs Communication links 

CLNORM Communication link normalization 

CLR Circurt layout record 

CLR Clear 

CLRC Circuit layout record card 

CLS CLCI in serial number format 

CLS Connectless-mode service 

CLSD Closed 

CLSV Class of service 

CLT CLCI telephone number format 

CLT Communications line terminal 

CLUS Cluster data (NTI) 

CM C-message frequency weighting 

CM Communication module 

CM Connection memory 

CM OCC video facility INTER/TRA blocal 1-26 

CMAC Centralized maintenance and administration center 

CMAP Centralized maintance and administration position 

CMC Call modification completed (SS7: in ISUP) 

CMC Cellular mobile carrier 

CMC Cellular modile carrier 

CMC Construction maintenance center 

CMD Command 

CMDF Combined main distributing frame 

CMDS Centralized message data system 

CMF Capacity main station fill 

CMP Communication module processor 

CMP Communications module processor 

CMP Companion board 

CMP Corrective maintenancean practices 

CMPR Compares 

CMR Call modification request (SS7: in ISUP) 

CMR Cellular mobile radio 

CMRJ CMR reject (SS7: in ISUP) 

CMS Call management system 

CMS Circuit maintance system 

CMS Circuit maintance system 1C 

CMS Circuit maintenance system 

CMS Communications management subsystem 

CMS Conversational monitoring system 

CMT Cellular mobile telephone 

CMT Combined miscellaneous trunk frame 

CMU CCS measured usage 

CMU Colt measurement unit 

CN C-notch frequancy weighting 

CN Change notice 

CN Changel noticee 

CN Connection 

CN SSN network trunk INTER/TRA blocal 1-26 

CN/A Customer name/address 

CN02 List of pay phones with coin disposal problems - 1 AESS c 

phone 

CN03 Possible trouble - 1AESS coin phone 

CN04 Phone taken out of restored service because of possible ( 

fraud 

CNA Communications network application 

CNAB Customer name/address bureau 

CNCC Customer network control center 

CNI Common network interface 

CNMS Cylink network management system 

CNS Complimentary network service 

CNS Concentrating network system 

CNT Count 

CNTS Counts 

CNVT Converted 
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CO 


Central office 


CPMP 


CO 


Continuous (SARTS) 


CPS 


CO 


OCC overseas connecting facility INTER/TRA blocal 1-26 


CPU 


CO UN 


Central office unit code 


CPU 


COA 


Change over acknowledgement (SS7 in MTE) 


CPU 


COAM 


Centralized operation 


CPU 


COAM 


Customer owned and maintained 


CQM 


COC 


Circuit order control 


CQR 


COCOT 


Customer-owned coin-operated telephone 


CR 


COD 


Code 


CR 


CODCF 


Central office data connecting facility 


CR 


CODEC 


Coder/decoder 


CR 


COE 


Central office entity 


CRAS 


COE 


Central office equipment 


CRC 


COEES 


COE engineering system 


CRC 


COEES 


Central office equipment engineering system 


CRCOK 


COER 


Central office equipment record 


CRE 


COEST 


Central office equipment signature table 


CRED 


COF 


Confusion received (outgoing) 


CREF 


COFA 


Change of frame alignment (DS-1) 


CREG 


COG 


Centralized operations group 


CRF 


COGRDG 


Central office grounding 


CRFMP 


COLP 


Connected line identification presentation 


CRG 


COLR 


Connected line identification restriction 


CRIS 


COLT 


Central office limit table 


CROT 


COLT 


Central office line tester 


CRR 


COM 


Common controller 


CRS 


COM 


Communication 


CRSAB 


COM 


Complement size 


CRST 


COM 


Computer output microfilm 


CRT 


COM/EXP 


PCM-compander/expander 


CRT 


COMM 


Comunication 


CRTM 


COMMS 


Central office maintenance management system 


CS 


COMMS-PM Central office maintenance management system- 


CS 


preventive 




CS 


Maintenance 


CS 


COMP 


Computed 


CS 


COMPNY 


Company 


CSA 


COMPS 


Central Office Managenment Program (GTE) 


CSACC 


COMSAT 


Communications satellite 


CSAR 


CON 


Concentrator - COSMOS command 


CSAR 


COND 


Conditions 


CSC 


CONF 


Conference calling (i 254 a) 


CSD 


CONFIG 


Confutation 


CSDC 


CONN 


Connect msg. (i 451) 


CSDN 


CONN 


Connector 


CSF 


CONN 


Nailed-up connections 


CSMA/ 


CONT 


Control 


CSMCC 


CONTAC 


Central office network access 


CSNET 


CONUS 


Continental united states 


CSO 


COO 


Change over order (SS7: in MTP) 


CSO 


COP 


Call offering procedure 


CSP 


COPY 


Data copied from one address to another - 1 AESS copy 


CSP 


CORC 


Commands and responses definition and compressing 


CSPDN 


program (IOS) 


CSR 


CORC 


Customer riginated recent change 


CSR 


CORCs 


Customer-originated recent changes 


CSS 


CORNET 


Corperate network 


CSS 


COS 


Connection-mode service 


CSS 


COSIB 


Central office platform operator service interface board 


esse 


COSMIC 


Common systems main interconnection frame system 


CST 


(frame) 




CST 


COSMOS 


Computer system for mainframe operations 


CSU 


COT 


Centeral office terminal 


CSUS 


COT 


Central office technician 


CT 


COT 


Central office terminal 


CT 


COT 


Central office terminal (opposite to RT) 


CT 


COT 


Continuity (SS7: in ISUP) 


CT01 


COTM 


Central office overload call timing (NTI) 





CP 

CP 

CPA 

CPC 

CPC 

CPC 

CPC 

CPCE 

CPD 

CPD 

CPE 

CPE 

CPG 

CPH 

CPI 

CPI 

CPIE 

CPM 

CPM 

CPM 



Cable pair CT02 
Call processing parameters (NTI) 

Communication processor (SARTS) CT03 

Concentrator identifier signaling link INTER/TRA blocal 1-26 CT04 

Control program CT05 

Centralized/bulk power architecture CT06 

Cellular phone company CT07 

Circuit provision center CTC 

Circuit provisioning center CTC 

Circuit provisioning center (special services design group) CTC 

Common peripheral controller equipment CTC 

Central pulse distributor CTD 

Common packet data channels CTE 

Customer premise equipment CTF 

Customer premises equipment CTI 

Call progress (SS7: in ISUP) CTL 

Cost per hour CTL 

COSMOS-premis interface CTM 

Computer private branch exchange interface CTM 

CP or AM intervention interrupt error CTMC 

COSMOS performance monitor CTMS 

Citcuit pack module CTO 

Cost per minute CTO 



Camer performance measurement plan 
Cycles per second 
CCS capacity usage 
Call pick up 
Call pickup group 
Central processing unit 
Circuit group query (SS7: in ISUP) 
CQM response 
Carriage return 
Control Record 
Control response 

OCC backup facility INTER/TRA blocal 1-26 
Cable repair administrative system 
Customer record center 
Cyclic redundancy check 

CRC ok! (C/l channel code) 
Create 

Credit card calling (i 256 a) 
Connection refused 

Concentrated range extension with gain 
Continuity recheck failure (outgoing) 

Cable repair force management plan 
Creg tag 

Customer records information system 
Centralized automatic reporting of trunks (NTI) 
Reset received (incoming) 
Centralized results system 
Centralized repair service answering bureau 
Specific carrier restricted 
Cathode ray tube 
Cathode-ray tube 
Central office regular call processing timing (NTI) 
Cable switching 
Call Store 

Channel service INTER/TRA blocal 1-26 
Conducted susceptibility (EMS) 
Customer class of service 
Carrier serving area 
Customer service administration control center 
Centralized system for analysis and reporting 
Centralized system for analysis reporting 
Cell site controller 
Circuit specific data 
Circuit switched digital capability 
Circuit-switched data network (t.70) 
Critical short form 
Carrier sense multiple access 
Complex services maintenance control center 
Computer science network 
Central services organization 
Cold start only (in eoc) 
Coin sent paid 
Coin set paid 

Circuit-switched public data network 
Clock shift register 
Customer service records 
Computer sub-system 
Computer subsystem 
Customer service system 
Customer service system center 

Call state or current state or change state (QUASI SDL) 
Combined services terminal 
Channel service unit 

Centralized automatic message accounting suspension (NTI) 
Call transfer (i.252 a) 
Control terminal 

SSN tie trunk INTER/TRA blocal 1-26 
Manually requested trace line to line information 
follows - 1AESS 

Manually requested trace line to trunk information 
follows - 1AESS 
Intraoffice call placed to a number with CLID - 1AESS call trace 
Interoffice call placed to a number with CLID- 1AESS call trace 
Call placed to number on the ci list - 1AESS call trace 
Contents of the CI list - 1 AESS call trace 
ACD related trace - 1 AESS call trace 
Central test center 
Centralized test center (DDS) 
Centralized testing center 

Complete a cable transfer or complete a cable throw 
Circuit test data 

Cable throw order establishment 
Display the contacter-transducer file 
Circuit termination identification 
Cable throw with line equipment assignment 
Central operator control 
Cable throw modification 
Contac trunk module 

Communications terminal module controller 
Carrier transmission measuring system 
Call transfer outside 
Continuity timeout (incoming) 
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CTP 

CTR 

CTS 

CTS 

CTS 

CTSS 

CTT 

CTT 

CTTC 

CTTN 

CTTU 

CTU 

I fW 

CTX 

CTX 

cu 
cu 



CU/EQ 
CU/TK 



Print cable transfer frame work 
Cable throw replacement 
Cable throw summary 
Call through simulator 
Clear to send 

Cray time sharing system 
Cartridge tape transport 
Cut through tag 

Cartridge tape transport controller 

Cable trunk ticket number 

Central trunk testing unit. 
Channel test unit 

Withdraw a cable transfer or a cable throw 

Centrex group number 

Various centrix verifies 

Channel unit 

Channel unit 

Control unit 

Customer unit 

Common update/equipment system 

Common update/trunking system 



CUCRIT Capital utilization criteria 

CUG Closed user group (i.255 a) 

CUP Common update processor 

CUSTAT Control unit hardware status 

CUT Circuit under test 

CUTOVER Cutover (pre-cut) inactive state. 

CV OCC voice grade facility INTER/TRA blocal 1-26 

CVN Vacant national number received (outgoing) 

CVR Compass voice response 

CW Call waiting (i.253 a) 

CW OCC wire pair facility INTER/TRA blocal 1-26 

CWC City-wide centrex 

CWD Call waiting deluxe 

CXC Complex service order input checker 

CXM Centrex table management 

CXT Complex order inquiry for nac review 

CZ OCC access facility INTER/TRA blocal 1-26 

CorNef Corporate network protocol (ECMA and CCITT q 9307931 

oriented) 



mat in 'Mt nan issue: 



UFO Thoughts 

(Continued from page 32) 



The relatively little known scientist Thomas Townsend Brown was certain he had the answer. As a child in the 1900's he was 
experimented on his own with electricity and radio One of the many items he obtained was the newly invented Coolidge X-ray 
tube. He thought that a key to space flight might be found in X-rays. He put the tube on a delicate balance looking for any 
change in weight when the device was charged He did notice that the device tended to move when it was charged or 
discharged. Subsequent experimentation showed that it was not eh X-rays that were providing the force, but the high voltages 
needed to charge the device. He eventually made a device he optimistically called the "gravitor", a box about 12 inches by 4 
inches that when charged with about 100,000 volts was shown to lose or gain around 1% of its weight. 

Later, while a student at Dennison University at Granville, Ohio, in 1924, studying electronics under Dr. Paul Alfred Biefeld, 
he was able to postulate the Biefeld-Brown effect as an explanation of what was happening in his Coolidge tube many years 
before. Although he served in the Navy and worked for many schools and corporations doing various forms of research, his 
ijravatics was always in the back of his mind. He continued to study and experiment. Eventually , in 1953, Brown 
demonstrated in the laboratory a 2 foot diameter disc tethered to follow a 20 foot diameter course. The disc, when charged 
lo 50 kilovolts at 50 watts moved at approximately 12 miles per hour. Later, he managed to construct a device 3 feet across 
,ind flew it in a 50 foot diameter course with results so impressive that they were immediately classified by the military 
representatives at the demonstration 

The device that Brown worked on was essentially a condenser, known in it's more common and smaller form as the 
capacitor. Like the coil, or inductor, provides the connection between electricity and magnetism, does the capacitor provide 
the connection between electricity and gravity? After all. aren't most UFO's reported in the shape of a disc? Even so, in order 
to provide enough power for such a device to make a working aircraft possible, the energy required would be enormous. Can 
a powerful enough power source be constructed that is small enough and light enough to provide the energy appetite for the 
gravity engine and yet still fit on the craft? 

What about anti-matter? Most people know from Einstein's formula E=mc 2 that matter and energy are the same and 
interchangeable. The first atomic bombs converted about 10% of the mass of the fissionable material into energy. Modern 
thermonuclear devices are slightly more efficient But what if you could turn matter into energy at 100% efficiency? I'm sure 
most of us are familiar with the warp drive from Star Trek that utilizes a matter/anti-matter core to create energy The magic 
of the Enterprises engines is allowed through the use of Dilithium to regulate the reaction. Could mankind build a matter/anti- 
matter energy source? Would it require a regulation material? 

According to Bob Lazar, such a device is possible, and exists in the UFO's he claims are being studied by the Air Force at 
Groom Lake, Nevada Bob states that the anti-matter reactor utilizing a heavy element that would be at number 1 15 on the 
periodic chart. The highest known element is currently only 107. although it has been theorized that the elements may 
become stable again around elements 113 or 114. According to Lazar, element 115 is bombarded with protons, creating 
element 116, which decays back to 115 releasing anti-matter. The anti-matter then reacts with matter to produce a gravity 
wave that is channeled out of the reactor to propel the craft. Bob claims that the reactor is 100% efficient. Whether Bob 
Lazars claims are true is still up for grabs, although his story s quite interesting and full of amazing details. 

We have gone from simple to more complex propulsion systems. They have even become quite powerful But it is quite 
obvious to propel mankind into the future, we need to come up with a more elegant and less brutish way of moving air and 
space craft to our destinations. There may yet be unknown elements with unknown properties, but how can we discover them 
with the worlds scientist being narrow minded to the point of having no interest in finding the new discoveries and putting down 
anyone who attempts to forward such ideas on their own. Or is it that some scientist know the truth but are keeping it all a 
secret to protect the sociological order of the world, fearing that mankind is not ready for such insight? Were we ready for the 
atomic bomb that they gave us? No, but I think we coped and adapted quite well Mankind is always ready to take on the 
future and I personally find myself anxious at the possibilities. 



If you live in a country other that the United States, 

we're interested in ANY information you might have about the 

telecommunications, cable TV or other utilities in your area! 
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Amica Section 

By Major Coyote 



AMIGA NEWS 

COMMODORE SOLD 

As of now, Escom of Germany is the owner of Commodore. Their bid ($12 million by the end) was accepted over that of 
Dell/CEI's, even though it was less. Dell's bid had a condition - a 30 day period where they could look over what they bought 
and decide if they really wanted to keep it. That was unacceptable to the liquidators, so Escom's bid was accepted. Wait a 
minute -- Dell? Yes, apparently CEI felt they would have a better chance if they teamed up with Dell Dell said they didn't 
even realize there was going to be an auction for Commodore until shortly before the event. Speculation about Dell claims 
they were interested in Commodore's patents on AutoConfig. 

So what's an Escom? 

Escom is Germany's number 2 computer manufacturer, and is expanding rapidly They have recently purchased a chain of 
retail outlets in the UK, and already own many in Germany. They have the money, the manufacturing ability, and the 
marketing ability to make the Amiga a success. In a press release and in an interview with Barnard van Tienen (a former vice 
president of Commodore), Escom has stated the following in reference to the Amiga: 

•/ They are looking into the PowerPC for future Amigas, although other options will be considered. 

l/ They will be producing Amiga's with the cooperation of a Chinese manufacturer, and are promising Amiga's (A4000, 
A1200, A600) within 2-3 months 

\/ An "Amiga on a card" for the IBM is planned 

v They want to use Amiga technology for other products, like "set top" boxes. 

•/ They want to bring back the C64, mainly for the Chinese market. 

\/ They may make "Commodore" brand Macintosh clones. 

%/ Escom wants to get into the american computer market, but figured "just another PC" wouldn't sell The Amiga is 
basicly a "new" computer that can be re-introduced to the american computer market. 

\/ Escom will re-hire ex Commodore staff, and already employs many of them. 

>/ They've liscensed production and sales of Amiga's to a Chinese company named 'Tianjm", which sells 16 bit game 
machines in China and holds an 80% market share (hey, if they can sell a few billion CD32's...). 

•/ They will consider liscenses for other companies to produce and sell "clone" Amiga's. 

%/ Escom will probably buy out Commodore UK 

One wonders why Escom has been so quiet and secretive about all this. They've been in the game for at least 6 months and 
nobody knew much about them. I have a theory: Maybe they wanted to avoid getting people's hopes up. Maybe they wanted 
to avoid rumors. Maybe they wanted to avoid making or implying any kind of promises that they might not be able to keep. 
Commodore UK, before X-Mas last year, implied that they would have Amiga's back on the market for X-Mas While not a 
promise, because they said "if they won the bid, people took it as one. I can understand Escom wanting to avoid all of that 
until the deal was done So now we have to ask the obvious question: is Escom a good thing for the Amiga? Well, if 
everything they say is true, they sound pretty good to me. The Amiga is very popular in Germany, at least from what I can tell. 
There are a lot of Aminet-FTP sites and Amiga BBS's there, as well as Amiga developers. If nothing else, at least Escom will 
be surrounded by Amiga supporters. 

Wither CEI? 

In a CEI FAX to dealers, they have stated that they will, Escom permiting, continue to market Amiga's and if possible liscense 
Amiga technology to develop "Amiga clones". They are committed to the Amiga and have many plans in store for us. CEI 
was/is a distributer of Commodore products in the US, and at the very least will continue to be so in the future. 

NEW PRODUCTS 

A new version of ARexx is being worked on. It's supposed to be much faster and GUI based Sounds like a SORELY needed 
upgrade of one of the most significant Amiga products ever. 

There's a nifty little package called "AT API". This software driver lets your A600, A1 200, A4000, or any Amiga with a bsc/Alfa- 
Data IDE controller use popular and cheap IBM CD-ROM drives It is fully compatible with an existing IDE drive. With an 
optional additional IDE cable, the driver lets you connect upto four IDE drives. Also from the same people are CacheCDFS 
and CD32 Emulator. 
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Contact: 

Hirsch & Wolf OHG NBG-USA, Inc. 

Mittelstr. 33 482 Holly Ave. 

56564 Neuwied St. Paul MN55102 

Germany USA 

Tel.: ++49-2631-83990 Tel.: ++1-612-2909447 

Fax.: ++49-2631-839931 Fax : ++1 -61 2-2909449 

There's a new version of Wolf Faust's excelent printing software Highly recomended, faster printer drivers with 256 level 
dithering, etc. 

Contact: 

arXon GmbH 

Assenheimer Str. 17 

D-60489 Frankfurt 

Germany 

Phone: (69) 7896891 

Fax: (69)7896878 

If you don't want to buy any hardware to run Macintosh software, there is now a totaly software-only emulator: Shapeshifter 
2.0. It supports 256 colours in AGA (16 in ECS), and up to 24 bit colour on the Picasso-ll, EGS, and CyberGraphics cards 
You don't even need an MMU. so you can run it on your A1200. Supports Amiga floppy, harddrive, serial, parallel, and SCSI 
ports: Amiga sound and parallel port style digitizers, Amiga clipboard Demo version available on Aminet. 

Maxon is working on a new release of Maxon C++. Maxon C++ is AT&T 3 Standard compatible (templates and exceptions) 
and includes Amiga specific C++ classes. 

There is a not well known but potentialy very handy card called the "GoldenGate II" This card lets your Amiga access IBM 
cards directly (it's not an emulator), such as serial and modem cards. Software Results Enterprises (SRE) has assumed 
development and support for this card. 



Amiga History 



This year of 1995 marks the lenlh year (or the Amiga Yes folks, it has actualy been ten years since the revlutionary Amiga first hit the scene. Since 
that time, the Amiga has been responsible for many industry firsts, whether the industry at large wishes to recognize them or not. This year also marks 
a momentuous moment of change for the Amiga. Just one year ago, Commodore declared bankruptcy. In May of this year, what was left of 
Commodore, including the Amiga was finaly purchased by Escom. With the coming of Escom, tne Amiga finaly has a chance to become what it 
could have but did not under Commodore's inept business practices. Lets look back at some key historial events in Commodore's history, from the 
begining to the end: 

V 1958 Commodore Business Machines Inc. is established in Toronto, Ontario Canada, as a typewriter repair and sales company. 
\r 1960 By the early 1960s, Commodore is selling adding machines and a wide range of office equipment 

tr 1969 CBM produces one of the first hand-held calculators 

V 1977 The PET is introduced as the first personal computer. It features a 6502 microprocessor and 8K RAM for less than $1000 

V 1980 The VIC 20, the first home computer, is introduced for less than $300 
v 1983 The C64, the most popular home computer ever sold, is introduced 

\r 1984 In search of a new personal computer technology for professionals and consumers. Commodore acquires Amiga Computer Inc. 

\r 1985 The Amiga 1000 is introduced (and is) the first multitasking multimedia computer with a mouse-driven color graphic user interface. 

K 1P87 Commodore introduces the Amiga 500, 2000 and a Bridgeboard which enables 2000 series machines to run MS_DOS compatible software. 

\/ 1988 A2500 is introduced. 14Mhz 020 accelerator and SCSI-HD card. 

*/ 1989 A2500/030 is introduced. 25Mhz 030 CPU. 

K 1990 The next generation Amiga, the Amiga 3000 featuring Motorola's 68030, is introduced. The company unveils the CDTV player - the "first* 

home information/ education entertainment system able to play interactive multimedia applications on compact disc. 
\r 1991 Commodore's worldwide installed Amiga user base exceeds three million 
\r 1992 CBM introduces the Amiga 4000 in September, the revolutionary new member of the Amiga family. The A4000 is powered by a Motorola 

68040 and features high-resolution graphics simultaneously displayed in up to 262,144 colors from a palette of over 16.8 million hues. Other new 

products introduced include the Amiga 600, the A570, AmigaVision Professional, and AmigaDOS 3,0. 
)/ 1992 November 16: A1200 is introduced, MSRP of $699.00. 
\r 1992 Commodore's worldwide installed user base exceeds four million 

V 1993 March 19: A4000-030 is introduced, MSRP of $2399.00. 

*/ 1993 April 2: A4000T, A4091 SCSI-II card, and A1940/A1942 monitors shown at World of Commodore in New York. Prototype of MPEG card 

shown. 
>/ 1993 Aug 13: CD*32 introduced to Europe. 

V 1994 Jan: CD A 32 officialy announced to the USA. MPEG module shipping. C= claims 20,000 CD"32s shipping per week. 

V 1994 May: Commodore files for bankruptcy. 

v 1995 May: After a long year of deliberations, Escom AG of Germany purchases Commodore's assets and promises to continue the Amiga line. 

Without a doubt, Commodore played a very important role in the evolution of the home computer in late 70's and 80's. Among the first "Personal 
computers" to really become popular were the PET computers From the start, Commodore made inexpensive machines. In the 80's they shattered 
the price barters with the Vic 20, and then the enormously popular C64 -- the most popular single computer ever. In addition to making computers more 
affordable. Commodore also brought new advanced technology to low cost computers. The C64 was cheaper than most computers, yet offered 
impressive graphics and sound abilities. This trend continued when in 1984 Commodore aquired the Amiga company, and released the first Amiga in 
1985. 

The Amiga in 1985 was an incredible machine for it's day. It had both amazing hardware and an amazing operating system. It had the DOS command 
line like the IBM PC (though it was much more sophisticated), as well as having the newly popular GUI like the Macintosh, and went way beyond by 
being a true multitasking system. It had colour graphics and fancy sound abilities, an 880K 3.5" disk drive, and a two button mouse. It was 
revolutionary. 



Opinion 



An open letter to Escom. 

The Amiga community is both excited and a little bit afraid of the future for the Amiga. We are happy that the situation has 
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finaly been resolved, and that it appears that we will have new systems in a few months Escom's announced flexibility in 
licensing Amiga technology sounds like an idea who's time has come. But we are unsure for the future of the Amiga. There 
is no doubt that the Amiga must move to a RISC processor to stay competitive. The PowerPC is probably the safest bet, but 
is it the best? Before Commodore died, their engineers were working with the HP-RISC chip, which sounded very nice as the 
basis for a new custom chipset. There is no doubt that the AGA chipset is insuficient for the future (or even present) as far as 
PC's go AGA is well suited for "set top" boxes, embeded applications like Kiosks and other inexpensive multimedia displays, 
low cost game systems, etc. It may even be good for a portable Amiga (perhaps in an all CMOS version). But it falls short for 
desktop PC's. 

So in terms of hardware, the future Amiga would be some sort of system running a RISC CPU, and using some other chipset 
for graphics and sound. What is left of the "Amiga" in this system? What would distinguish this system over other similar 
computers like the PowerMac and PowerlBM's? Well if you don't know, I'll tell you: The Amiga's Operating System And this 
is the point I wish to make here The AmigaOS "must* be ported to this new system! Otherwise it is not an Amiga, it is just a 
clone of other PC's (since it would be foolhardy to start with a completely new and proprietary system that has no software or 
hardware support at all) 

This new system must be AmigaOS compatible Otherwise it will have no advantage over the competition, and the Amiga 
userbase will certainly be alienated -- causing them to either hold on to their existing Amigas, or switch to a Mac or IBM. 

Witness also the grass roots movement to create a "clone" of AmigaOS, which will run Amiga applications on current 
hardware or future RISC machines. Does Escom want to be forced to compete with their own user base (for which they just 
payed $12 million for)? I don't think so. I believe Escom is smarter than Commodore was. 

So I want to urge, plead, beg, whatever is necessary, to get Escom to realize the importance of AmigaOS to the future Amiga 
machine What's so great about AmigaOS? Take a look: 

* Fully pre-emptive multitasking system. The MacOS does not have this. Even Wmdows95 can't do it well. 

* 100% 32 bit "Micro kernel" OS. Wmdows95 still has 16 bit code! 

* Easily extended, efficient system of devices and libraries. 

* ARexx macro language and high level interprocess communication. 

* Very small and efficient Runs WELL in a mere 4MB of ram. 

At the moment, it is missing built in features like virtual memory, and memory protection -- but in porting it to a RISC platform, 
these things could be added. Neither Windows95 nor MacOS have memory protection yet. The only thing close to AmigaOS 
is IBM's OS/2. There is also a large body of software that could be licensed and built into/bundled with AmigaOS to very easily 
and greatly expand its ability (not to mention this would also make for some very happy and more loyal developers): 

* Virtual memory There are several VM systems Adopt one. 

* Networking Commodore developed Envoy. Bundle it. 

* TCP/IP. There is a PD package which could be included, as well as things like Mosaic. FTP, IRC and EMail frontends with 
GUI's. All of these could be integrated with an easy installer. 

* Better printing Wolf Faust's printer software is very excelent and should be standard stuff. 

* RTG software. There are several solutions out there. Pick a good one, and integrate it into graphics. library. 

I could go on and on as to what could be and should added to AmigaOS to make it a truly killer Operating System. There 
are Amiga users which have created some fantastic envirionments on their Amiga's. There is a large wealth of excelent 
PD/Shareware software and the programers who create it, which could be tapped. Don't be like Apple and IBM (other than 
successful!). Be resourceful and innovative. Take advantage of the knowledge of the Amiga community! We've been 
begging for it for almost 10 years now, please, use us for all we're worth! Don't make the mistakes Commodore made. 

The Amiga lives. 




Tired of all that late 

night BBSing, 

trying to find a 

place to advertise 

your BBS? 

ADVERTISE 
HERE!! 

It's FREE to have a 

spotlight done on 

YOUR BBS!! 
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BBS Spotlight 



We decided to devote this area to a Gerogia BBS listing in this issue since enough people asked for it. Here ya gol 


404-279-0717 Norcross 


RunningWild 


404-920-6682 Douglasvllle 


Hangar Deck 


404-288-6174 Atlanta 


X-Link 


404-921-4395 Atlanta 


Atlanta Xchg 


404-288-6858 Atlanta 


Decibel 


404-921-8900 Norcross 


Wizards Castle 


404-292-5303 Stone Mtn. 


Dining Room 


404-931-3991 Atlanta 


Cyber-X 


404-292-8761 Atlanta 


F-T-L 


404-934-4515 Stone Mtn 


Flagship Expr 


404-294-0237 Atlanta 


PC-Forum 


404-938-2213 Tucker 


PC-Link 


404-296-5931 Atlanta 


JunkYard Dog 


404-941-0746 LithiaSpring 


Thompson Towers 


404-296-9681 Stone Mtn 


Centurion 


404-945-2185 Buford 


MoonBeam Sys 


404-336-9701 Kingston 


Warrior Base 


404-962-51 16 Auburn 


GABBS 


404-365-0641 Atlanta 


CyberSpace Conn 


404-964-4483 Fayetteville 


SoftwareShop 


404-366-1436 Forest Park 


So. Crescent 


404-967-6473 Flowery Br 


S/Ware Monster 


404-370-0736 Decatur 


Shareware So 


404-971-3768 Marietta 


Disc-pak,graphx 


404-381-1947 Lilburn 


AESC 


404-972-3458 Snellville 


Milo'sMeadow 


404-410-9139 Atlanta 


Express Net 


404-974-0460 Acworth 


Club Torgy 


404 41 4-4400 Atlanta 


COM1:ATLPCUG 


404-977-6686 Atlanta 


PC Exchange 


404-422-2899 Marietta 


CallBox 


404-978-0015 Grayson 


Binary Zone 


404-428-8522 Kennesaw 


Scottish Moor 


404-982-0960 Atlanta 


Rock&Roll 


404-435-9608 Smyrna 


No Frills 


404-985-4022 Grayson 


PC-Connection 


404-442-6748 Woodstock 


MAILDROP 


404-994-0612 Atlanta 


ABBS 


404-445-2583 Dallas 


Danger Zone 






404-446-6650 Atlanta 


BigPeach 


706-235-7235 Rome 


Pool Hall 


404-447-5619 Norcross 


SLIME. 


706-543-2649 Athens 


SLIME 


404-459-8487 Villa Rica 


Radio Free VR 


706-561-7359 Columbus 


Country Store 


404-461-5947 Atlanta 


Cam's Wildcat 


706-650-8261 Martinez 


Genesis 


404-466-1366 Loganville 


HideOut 


706-673-4436 Rocky Face 


Comfy Chair! 


404-466-3994 Loganville 


Eagle Line 


706-687-7309 Columbus 


Columbus Connx 


404-471-1773 Jonesboro 


Peaches 


706-694-3295 Cohutta 


Hi-Tech Gateway 


404-476-2607 Duluth 


TheRightPlace 


706-746-5109 Sky Valley 


Sky Valley 


404-482-5753 Atlanta 


HomeBasedBsns 


706-769-0061 Watkinsville 


Route 66 


404-495-9479 Duluth 


Data Dimension 


706-798-3864 Hephzibah 


Beehive 


404-498-9646 Atlanta 


Chaos Inc.. 


706-820-9157 Lookout Mtn 


Intl. Bus. Exch 


404-509-7813 Marietta 


Base 


706-860-5070 Martinez 


Public's Domain 


404-516-0048 Woodstock 


AtlantaWindows 






404-518-8782 Roswell 


North Point 


912-242-3967 Valdosta 


CIRCUS ONLINE 


404-521-0445 Atlanta 


Undermind 


912-245-0610 Valdosta 


SouthernEcstasy 


404-548-0726 Athens 


Classic Athens 


912-249-0090 Valdosta 


Business Connct 


404-565-4258 Marietta 


DrDisk 


912-249-9124 Valdosta 


HOT South 


404-569-9651 Columbus 


PC Valley 


912-249-9584 Valdosta 


Powerline 


404-579-1 170 Marietta 


Atl SpiderWeb 


912-261-9114 Brunswick 


MalfunctionJunc 


404-587-4515 Marietta 


Rainmaker 


912-283-0117 Waycross 


Okefenokee 


404-596-8126 Columbus 


LaterDaze 


912-283-1535 Blackshear 


SEGE 


404-623-3285 Duluth 


Shadow Realm 


912-285-5406 WaresBoro 


BudgetCompFiles 


404-627-2662 Atlanta 


OASis,Sysops'Bd 


912-333-5975 Valdosta 


Valdosta St.Col 


404-641-8968 Atlanta 


SemWare 


912-368-8111 Hinesville 


TOWER BBS 


404-667-0885 Cumming 


Prime Time 


912-369-4350 Hinesville 


PROJECT BBS 


404-717-9867 Atlanta 


AtlantaCOM 


912-427-3310 Jesup 


Starshp Entrprs 


404-723-9150 Atlanta 


Game Room 


912-431-0836 Albany 


DOS Connexion 


404-730-2370 Atlanta 


OPM ATLANTA 


912-432-2440 Albany 


SoftwareDesign 


404-735-6454 Jasper 


Michael's Lair 


912-435-3327 Albany 


Night Lights 


404-740-8428 Alphareeta 


DCA Connx 


912-471-6833 Macon 


Dixieland 


404-742-8313 Winterville 


Express Line 


912-538-7950 Vidalia 


Cornerstone 


404-749-0680 Cedartown 


M.P.C. BBS 


912-673-6459 St Marys 


Night Shift 


404-751-8650 Alpharetta 


Engineered Ent 


912-729-3932 Kingsland 


NewsOfTheWorld 


404-762-0923 East Point 


PC Plus.Airline 


912-786-5888 Tybee Isle 


MicroLink 


404-798-4006 Augusta 


Jack's 


912-920-1952 Savannah 


ControlTower 


404-859-1557 Atlanta 


Micro Center 


912-920-8070 Savannah 


SAVANNAH 


404-867-2307 Winder 


Krystall Palace 


912-927-7323 Savannah 


Am Connx 


404-879-1600 Stone Mtn 


R.'s Little BBs 


912-931-0361 Americus 


E-Solutions 


404-920-0621 Atlanta 


TotalRecall 







If you operate a BBS and would like to have a "spotlight" done on it in the future, please send 
us a couple of pictures of your system, the name and data number of your system, YOUR 
name, address, voice phone number and include a small letter describing the "history" of your 
system. If you'd just like to have your system listed, forget the pics and the letter! We'll add ya! 

Send to: 

Blacklisted! 411 BBS Spotlight 

P.O. Box 2506 

Cypress, Ca 90630 
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All you ever wanted to know about 5ESS 

Part II 



This is a continuation from the last issue. We're just going to cut the crap 
and start where we left off! 



Batch Input 



FILE - Name for file in /rclog 

ERROR - Report recent changes released with error. 

DEMAND - Report demand recent changes. 

TIME=XXXXXXXXXX - XX - mounth, XX - day, XX - hour, XX minute, XX • 

Second 



The Batch Input feature for the 5ESS switch allows recent changes (RC) to 

be entered at any date and time when the RC update would be performed. BMR - batch mode release 

This allows RC input to be entered quickly, and for a large number of inputs 

The large numbers of RC input can be released quickly in batch mode. The 

RC input can then be entered at any time, stored until needed, and then 

released for use by the system whenever needed, at any specific date 

and/or time First and second level error correction is done during batch 

input. There are several different modes of batch input. These are: 



This is the manual release (updating) of the 5ESS database. This is done 
from the RC/V channel craft shell. The command that is used is the 
EXC:RCRLS input message. There is no real need to go into this message. 



BMI - batch mode input - TIMEREL and DEMAND 
BMD - batch mode display 
BMR - batch mode release 

BMI - Batch Mode Input - TIMEREL and DEMAND 



Entering BMI (Batch Mode Input), one types " BMI " at the RCA/ menu 
prompt Once entering, you will be prompted with whether the input is 
DEMAND (demand) or TIMEREL (Time Release). DEMAND input allows 
one to manual have the batch update the database, TIMEREL is automatic. 
TIMEREL has one enter a time and date. When using DEMAND, you will 
be prompted for the file name. The file will be in " /rclog " in the DMERT 
OS In TIMEREL, you will be prompted with the CLERK-ID. which in this 
case is the file name for the file in the " /rclog ". Then for VERBOSE 
options, the RC SRVOR (Recent Change Service Order) is displayed on the 
screen 

-RC SRVOR View in the BMI TIMEREL Batch Option- 

5ESS SWITCH 

RECENT CHANGE B.1 

SERVICE ORDER NUMBER VIEW 

ORDNO = Service Order Number 

ITNO = Item Number 

MSGNO = Message Number 

RDATE = Release Date (Update database Date) 

RTIME = Release Time (Update database Time) 

BMD - batch mode display 

BMD is a "mask" of RC/V done from the RCA/ channel craft shell, by using 
the REPT:RCHIST or a pseudo menu system. All transactions are 
displayed on the ROP, though the data could also be sent to a file in the " 
/rclog " in DMERT. The Pseudo menu system looks like: 



1 . Summary of clerk activity 

2. Activity by service order number 
3 Activity by clerk ID 

4. Return to view or class menu. 

1 allows one to view the "DELAYED RELEASE SUMMARY REPORT." 

2 produces 3 "DELAYED RELEASE REPORT BY SERVICE ORDER ." 

3 produces the "DELAYED RELEASE REPORT BY CLERK ID." 

4 Return to view or class menu, self-explanatory. 

REPT:RCHIST - BMD 

The REPT:RCHIST BMD (Text) command is done from the RCA/ channel 
craft shell The command synopsis is: 

5E2 - 5E5 (Generics) 

REPT:RCHIST,CLERK=[,FORMAT=(SUMMARY|DETAIL}]{[.ALL]|[,PENDI 
NG][,COMPLETEl [,ERROR)[,DEMAND])[,DEST=FILENAME] [,TIME=XX 
XXXXXXXX]; 



5E6 - 5E8 (Generics) 

REPT:RCHIST,CLERK = a(,FORMAT = {SUMMARY|DETAIL>] 
{,ALL|,b}|,DEST={c|FILE}][,TIME=XXXXXXXXXX]; 

SUMMARY - Report selection, format by key. 

DETAIL - Report selection for Recent Change entire. 

ALL - Report all recent changes. 

PENDING - Report pending recent change input. 

COMPLETE - Report released recent changes that was successful when 

completed 



Adding RCF (Remote Call Forward) on a SESS 

1. At the "MENU COMMANDS" commands prompt of the 5ESS main menu 
in the RCA/ APPRC menu system of the SESS, enter '12' for the "BRCS 
FEATURE DEFINITION". Then access screen '1.11', this is the BRCS 
screen. When it asks you to 'ENTER DATABASE OPERATION' enter "U" 
for Update and hit return 

NOTE: When at menu '12,' you will NOT see '1.11' listed in the menu 
options. By just accessing menu '1' you will not be able to add features. 
This is a problem with the 5ESS menu system. 

2. Type in the Telephone Number You will be prompted with: 

Enter Insert, Change, Validate, screen*, or Prinfform operation prompt 

I - to insert a form 

C - to change a field on a form 

V - to validate the form 

A - to display the desired screen number 

P - to print the current screen 

U - to update the form 



Enter " C " to change, access filed 11 and row 1 (goto the /CFV wherever 
it may be) or add /CFR if it is not there. If it does though, leave the "A" 
(Active) field "N" (Yes or No). Change the P (Presentation) column to "U" 
(Update). Then Hit Return 

NOTE: Different Generics have other fields, one of them being a AC 
(Access Code) field. This field is a logical field, that mean only accepts a 
"Y" for yes and "N" for no. Also when adding the feature to the switch, 
the row and field numbers may not be shown, but will always follow this 
pattern Also note that the /CFV (Call forwarding variable) feature may not 
be there, there maybe no features on the line. These examples are from 
Generic 4 (2). Here is a example of 5E8 (which is not used too many 
places, but this is what menu 1.11 in the BRCS Feature Definition looks like: 

5ESS SWITCH 

SCREEN 1 OF 2 RECENT CHANGE 1.11 

(51 12.51 13)BRCS FEATURE ASSIGNMENT (LINE) 

Enter Insert, Change, Validate, screen*, or Print: _ 

Hit Return twice to get back to "ENTER UPDATE, CHANGE, SCREEN #, 
OR PRINT:". Enter a "U" for update and hit Return It will say "FORM 
UPDATE". 

3. Next access screen 1.22, call forwarding (line parameters) or it will just 
come up automatically if you set the "P" to "U". 

4. If you used the automatic forms presentation, it will have the telephone 
number already on LINE1. If not retype the telephone number you want 
forwarded. The bottom of the screen will say "ENTER UPDATE, CHANGE, 
VALIDATE OR PRINT:", type "C" for change and hit return. 

5. When it says CHANGE FIELD type "9" and enter your forward to DN 
(Destination Number) including NPA if necessary. This will put you back to 
the "CHANGE FIELD" prompt. Hit return again for the "ENTER UPDATE, 
CHANGE, VALIDATE OR PRINT:". Hit "U" for Update form and wait for 
"FORM UPDATED". 

6. Lastly, access screen 1.12, BRCS FEATURE ACTIVATION (LINE 
ASSIGNMENT). At the prompt enter a "U" for Update, and on ROW 1 1 Line 
1 (or wherever), change the "N" in column "A" to a "Y" for Yes, and you are 
done. 

Adding other features 

To add other features onto a line, follow the same format for adding the 
/CFR, but you may not need to access 1 .22. Some other features are: 
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Feature Code: 


Feature Name: 


'LIDLXA 


- CLID 


'CFR 


Remote Call Foiward 


'CWC1 


- Call Waiting 


'CFBLIO 


- call forward busy line i/o 


/CFDAIO 


- call forward dont answer i/o 


'CFV 


call forwarding variable 


ICPUO 


- call pick up o lused in the selql field! 


ICPU7 


- call pick up t lused in the tpredq field! 


'CWC1D 


- Premiere call waiting 


/DRIC 


Dist. ring 


'IDCT10 


- Inter room ID 


/IDCTX2 


- 1 digit SC 


/IDCTX2 


- Interoom ID 2 


/IDCTX2 


- Premiere 7/30, convenience dialing 


/IDCTX3 


- Premiere 7/30, no cd 


/IDMVP1 


- Premiere 2/6, no convenience dialing 


/IDMVP2 


- Premiere 2/6, CD, not control sta. 


/IDMVP3 


- Premiere 2/6, CD, control station 


/MWCH1 


- Call hold 


/MWCTIA2 


• Call transfer 2 


/TGUUT 


- Terminal group ID number with TG view (1 ,29) 



ANI/F the whole switch 

Automatic Number Identification failure (also called "dark calls") are caused 
t>y variety of different things. To understand this better, here are the 
technical names and causes, note this is not in stone and the causes are 
not the only causes for a ANI-F to occur. 

ANF -- Failure to receive automatic number identification (ANI) digits on 
incoming local access and transport area (LATA) trunk 
ANF2 -- Automatic number identification (ANI) collected by an operator 
lollowing a failure to receive ANI digits on an incoming centralized 
automatic message accounting (CAMA) trunk from the DTMF decoder. 
ANI -- Time-out waiting for far off-hook from Traffic Service Position 
System (TSPS) before sending ANI digits. 

Setting up your own BLV on the 5ESS from the Craft shell RC/V 
Channel 

Well, we have come to the fun part, how to access the No-Test trunk on the 
5ESS (this is also called adding the third trunk) I will not be too specific on 
how to do this You will need to figure out just how to do this. The first thing 
you want to do is to request a seizure of a line for interactive trunk and line 
testing. One must assign a test position (TP). 

SET:WSPHONE.TP=a,DN=b 
SET.WSPOS,TP=a.DN=b 

a = A number between 1 and 8 

b = The number you wish assigned to the test position 

This will chose a number to be the test number on the switch. Now using 
the CONNWSLINE one can set up a BLV. 

CONN:WSLINE,TP=a,DN=b: 

a = TP that you set from the SETWSPOS 
b = The number you want to BLV 

To set this up on a MLHG (can come in real useful for those peksy public 
packet switched networks), do a: 

CONN:WSLINE.TP=a,MLHG=x-y; 

x = MLHG number, y ■ MLHG member number 

To take set things back to normal and disconnect the BLV do a: 

DISC:WSPHONE,TP=z 

z = TP 1 through 8 

NOTE: One may need to do a ALW:CALLMON before entering the CONN 
commands 

BIG NOTE: If you set your home telephone number as the test position, 
and you have only one phone line, you are stupid. 

Other Sources 

Here is a list of Manuals that you can order from the CIC (1 -800-432-6600) 
Note that seme of these manuals are well over hundreds of dollars. 



Manual 235-105-210 Routine Operations and Maintenance 

Manual 235-105-220 Corrective Maintenance 

Manual 235-105-231 Hardware Change Procedures - Growth 

Manual 235-105-24x Generic Retrofit Procedures 

Manual 235-105-250 System Recovery 

Manual 235-105-250A Craft Terminal Lockout Job Aid 

Manual 235-105-331 Hardware Change Procedures - Degrowth 

Manual 235-1 05-44x Large Terminal Growth Procedures 

Manual 235-118-200 Recent Change Procedures Menu Mode Generic 

Program 

Manual 235-118-210 Recent Change Procedures Menu Mode 

Manual 235-1 18-213 Menu Mode 5E4 Software Release 

Manual 235-118-214 Batch Release 5E4 Software Release 

Manual 235-118-215 Text Interface 5E4 Software Release 

Manual 235-118-216 Recent Change Procedures 

Manual 235-118-217 Recent Change Procedures Batch Release 5E5 

Software Release 

Manual 235-118-218 Recent Change Attribute Definitions 5E5 Software 

Release 

Manual 235-118-21x Recent Change Procedures - Menu Mode 

Manual 235-118-224 Recent Change Procedures 5E6 Software Release 

Manual 235-118-225 Recent Change Reference 5E6 Software Release 

Manual 235-118-240 Recent Change Procedures 

Manual 235-118-241 Recent Change Reference 

Manual 235-118-242 Recent Change Procedures 5E8 Software Release 

Manual 235-1 18-24x Recent Change Procedures 

Manual 235-1 1 8-31 1 Using RMAS 5E4 Software Release 

Manual 235-118-400 Office Records and Database Query 5E4 Software 

Release 

Manual 235-190-101 Business and Residence Modular Features ** 

Manual 235-190-105 ISDN Features and Applications 

Manual 235-1 90-1 1 5 Local and Toll System Features 

Manual 235-190-120 Common Channel Signaling Service Features 

Manual 235-190-130 Local Area Services Features 

Manual 235-190-300 Billing Features 

Manual 235-600-103 Translations Data 

Manual 235-600-30x ECD/SG Data Base 

Manual 235-600-400 Audits 

Manual 235-600-500 Assert Manual 

Manual 235-600-601 Processor Recovery Messages 

Manual 235-700-300 Peripheral Diagnostic Language 

Manual 235-900-101 Technical Specification and System Description 

Manual 235-900-103 Technical Specification 

Manual 235-900-104 Product Specification 

Manual 235-900-1 Ox Product Specification 

Manual 235-900-301 ISDN Basic Rate Interface Specification 

Manual 250-505-100 OSPS Description and Procedures 

Manual 363-200-101 DCLU Integrated SLC Carrier System 

Manual TG-5 Translation Guide 

Practice 254-341-100 File System Software Subsystem Description 3B20D 

Computer 

Practice 254-301-110 Input-Output Processor Peripheral Controllers 

Description and Theory of Operation ATST 3B20D Model 1 Computer 

None. 

Practice 254-341-220 3B20 System Diagnostic Software Subsystem 

Description 3B20D Processor 

CIC Select Code 303-001 Craft Interface User's Guide 

CIC Select Code 303-002 Diagnostics User's Guide 

CIC Select Code 303-006 ATST AM UNIX RTR Operating System, System 

Audits Guide 



Manual 234 
Manual 235 
Manual 235 
Manual 235 
Manual 235 
Manual 235 



110 System Maintenance Requirements and Tools 

001 Documentation Guide 

100 Switch Administration Guidelines 

125 System Description 

1 1 System Maintenance Requirements and Tools 

200 Precutover and Cutover Procedures 



IM-5D000-01 Input Manual 
OM-5d000-01 Output Manual 

OPA-5P670-01 The Administrator User Guide 

OPA-5P672-01 The Operator User Guide 

OPA-5P674-01 The RMAS Generic - Provided User Masks 

Trademarks 

5ESS - Registered trademark of ATST. 

CLCI - Trademark of Bell Communications Research, Inc. 

CLLI - Trademark of Bell Communications Research, Inc. 

ESS - Trademark of ATST. 

SLC - Registered trademark of ATST. 

UNIX - Registered trademark of ATST. 

DMERT - Registered trademark of ATST. 

SCCS - Registered trademark of ATST 

DMS - Registered trademark of Northern Telecom 

DEC - Registered trademark of Digital Equipment Corporation. 

VT100 - Trademark of Digital Equipment Corporation. 



Acronyms and Abbreviations 

ADTS - Automatic Data Test System 
ALIT - Automatic Line Insulation Testing 
AMA - Automatic Message Accounting 
AP - Attached Processor (lAESS 3B20) 
ATICS - Automated Toll Integrity Checking System 
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MCC 
MLT-2 



The Second Generation of 



BLV - Busy Line Verification 

BMD - Batch Mode Display 

BMI - Batch Mode Input - TIMEREL and DEMAND 

BMR - Batch Mode Release 

BRCS - Business Residence Custom Service 

CAMA - Centralized Automatic Message Accounting 

CIC - Customer Information Center (AT$T) 

DAMT - Direct Access Mechanize Testing 

DLTU - Digital Line Trunk Unit 

DMERT - Duplex Multiple Environment Real Time 

DSU - Digital Service Unit 

DTAC - Digital Test Access Connector 

GRASP - Generic Access Package 

IOP - Input/Output Processor 

IPS - Integrated Provisioning System 

ISDN - Integrated Services Digital Network 

ITNO - Item Number 

LMOS - Loop Maintenance Operations System 

LU - Line Unit 

- Master Control Center 
- Mechanized Loop Testing 
Equipment 

MML - Man Machine Language 
MSGNO • Message Number 
MSGS - Message Switch 
NCT - Network Control and Timing 
ODD - Office Dependent Data 
OE - Office Equipment 
ONI - Operator Number Identification 

This is all end of the section on SESS. There's a LOT more information regarding this switch, so keep on sending us 
that information so we can print itl If you send it in, we'll print it. We've said it a million times, people! Send in those 
articles! You know what we like to print, so mail us, fax us, call us or yell for us! As long as you keep sending in 
those cool articles. 

This is the very article that raised so many eyebrows and was the fuel to feed the fire bombing on us throughout the 
alt.zine/alt.2600 feeds, etc. From what everyone says, this very article was in an Issue of 2600, an issue of HackTic 
and an issue of Phrack. We cannot verify this, but we are mentioning this as a courtesy to all of those who are pissed 
off at us. This article was submitted by a person who claimed to have been the author of this and requested that he 
remain anonymous for whatever reasons. We honored that request and did not make any mention of his name. We 
will continue to honor such requests, however, we WILL do a better job of researching origins of material and do our 
very best to make any mention of previous printing in other magazines. Again, we're sorry if we stepped on some 
toes with this one. Happy hacking, everyone. 



So, you te been thinking about u/riting us 

a tetter or article, huh? 

JUST00IT! 



ORDNO 


- Service Order Number 


OSPS 


- Operator Service Position System 


OSS 


Operations Support System 


POVT 


- Provisioning On-site Verification Testing 


RC 


Recent Change 


RCA/ 


Recent Change and Verify 


RDATE 


- Release Date (Update Database Date) 


RMAS 


- Remote Memory Administration 


RTIME 


- Release Time (Update Database Time) 


RTS 


Remote Test Unit 


SARTS 


- Switched Access Remote Test System 


sees 


- Switching Control Center System 


SLC - 


Subicer Loop Carrier 


SM 


Switching Module 


SMAS 


- Switched Maintenance Access System 


SMPU 


- Switch Module Processor Unit 


SONET 


- Synchronous Optical Network 


SPC 


Stored Program Control 


STLWS 


- Supplementary Trunk and Line Work Station 


TFTP 


- Television Facility Test Position 


TIMEREL - Time Release 


TIRKS 


- Trunk Integrated Record Keeping System 


TMS 


Time Multiplexed Switch 


TRCO 


- Trouble Reporting Control Office 


TSI - 


Time Slot Interchangers 


TSIU ■ 


Time Slot Interchange Unit 


TU - 


Trunk Unit 


VFY - 


Verify 





tbis mootb's CoDcP mEssaCe! 

Can you decipher it? 






%*#%@*#$$*&#@*%$$&$%@*$&%*%* 
#%@#%*#$$*&#@*%$$&%&@$@*%& 
%*#$$*&#@*%$$&%&$#@*@#%&%* 











Blacklisted! 411 Letters 

P.O. Box 2506 

Cypress, Ca 90630 



DID YOU MOVE? ARE YOU 
THINKING OF MOVING? 

Let us know several weeks in advance. 
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Game TipS o' The Month! 



JOHN MADDEN FOOTBALL Close up Trick - When the title screen shows, hold down and any button and then press START 
several times to get past the screens. Once you do this, the screen will go blank for a couple of seconds and then you will get 
a closeup of the fans. Just let go of the button to start the game. 



LEMMINGS Passwords - Passwords to help ya out 



FUN TRICKY TAXING MAYHEM 
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MM CD — 'CD H (D (I) PI » "O O 3 3 CD < 
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skilL Nfi, pfjes^nd hold the^L button. W^iilei-^olding toe L bu|tpn^resj^"arj^ hold the R^euttgn. With these held down, press 
UP on tpte qontrol pad. You $ill hear "Blr^gofindia ^j-een sr^ulttspRfarrttiat will let yffiu iifwease youMjves and credits to 
con§uifeH 00 rrcno J rrH---D J O i 
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WANTED. 



Articles for our magazine! 

Got an article you 'J like to see in our magazine? 

SEND IT IN NW! 
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The Waaaay kOOL Blacklisted! 411 Photo Gallery! 




"The Lever" by Shoe$tring What we 
have here is pretty interesting. In the 
background we see a house, obviously 
(well, maybe not so obvious, if you 
happened to get a copy that somehow 
managed to get puked on by the 
printer) In the foreground of the picture, 
nearest our viewpoint, you will see a 
utility pole. On this pole what looks like 
a large "lever" is attached to it. Well 
this is a level, actually. It's connected 
to a mechanism at the top of the utility 
pole, via a long length of solid metal or 
plastic tubing. From what we can tell, it 
looks as if this "lever" is used in some 
fashion as a power main of sorts. 
Switch the lever in the right way and cut 
off power to a grid? Cool. We're not 
sure, but it looks like that's what it is.. 



The Tower - by The Gauntlet Welp, 
here's the tower of power.. There's 
nothing too exciting to say about this 
sucker, but from the looks of it and it's 
surrounding, we'd say that it was taken 
somewhere along the way to Nevada. 
Can anyone say, "Las Vegas?" We 
thoght so!! Anyhow, it's just a picture of 
some high-voltage power lines... the 
thing does look kind of cool, sorta. 
Speaking of Las Vegas, that reminds 
me of the upcoming DEFCON III 
convention to be held at the Tropicana 
Hotel in Vegas August 4th through the 
6th. Dark Tangent, the originator/owner 
of the whole "DEFCON" convention can 
be contacted on his voice mail at 0-700- 
826-4368, through internet email at 
dtangent@defcon.org, snail mail at 
2709 E. Madison #102, Seattle, WA 
981 12. ..The address for the Tropicana 
Hotel is 3801 Las Vegas Boulevard 
South, Las Vegas, Nevada, 89109. 
They can be contacted at (800)468- 
9494. If you need to know rates or wish 
to make reservations, give them a call. 
If you're an old timer hacking expert or 
a total newbie hacker, you need to 
attend this convention!! Be sure to take 
extensive notes while you're there so 
we can hear all of your comments when 
it's all over with. We hope you can 
make it and have a good time!! Next. 




Wanted: Photographs! 

If you have a photo of a payphone, local telephone company vehicle or building, local cable 
company vehicle or building, or some other interesting item, please send them to us along 
with a short "memo" explaining what it is that we're looking at! If you send a photo that we end 
up using in our magazine, we'll mention your name along with the photo. 

Send to: 

Blacklisted! 411 Photo Gallery 

P.O. Box 2506, Cypress, Ca 90630 



54 



Blacklisted! 411 



Hardware Review 



Telephone Interface - Circuit Werkes 
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Ok, so you have a new project for the telephone 
and you need some way to detect rings.. ..detect 
line current, etc.. Well, this is what you need, 
people. This interface provides ring detect, line 
current detect, and a bidirectional audio path 
with automatic signal limiting. Includes pass 
through type approval for connecting your 
project to the phone lines. It's absolutely 
perfect for those of you who need some quick 
way to get around the ring detect. That alone 
pays for itself. Speaking of pay, this unit will 
cost you $29.95. ok, $30 might seem a bit 
costly, but if you've ever worked on stuff like 
this, the $30 is worth it, considering you won't 
have the hassle of worrying about a RING 
DETECT. Call CircuitWerkes at (904)331-5999 
or fax them at (904)331-6999. 



OTMI Decoder - Circuit Werkes 

This little puppy is a pretty cool tool to have laying 
around when you're in the mood to dig into some 
new telecommunications project or you're listening 
to some people on the Amateur radio making a few 
autopatch calls... Wanna know what number they're 
dialing? Well, hook this little circuit up and VOILA! 
Instant information. It will decode all 16 standard 
DTMF tones (0-9, #, *, A-D). It works off of every 
output source we had available: we played some 
prerecorded tones into it, we pumped "live" manual 
dials into it, off the air, etc. It worked like a charm - 
no screw ups, etc. It's really amazing how these 
devices work. So simple and so very very useful. 
I'm glad we have a few of these devices handy! It's 
available from CircuitWerks for $79.95 (prebuilt 
unit) or $49.95 (complete KIT) Same number! 
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Want to have your hardware 
REVIEWED? 

That's what we thought! It's simple. Send us a sample of your product with a brief description 
and/or operating instructions along with any other comments and see your product reviewed in an 
upcoming issue! It'll cost you nothing and you'll have about 30,000 people all over the world looking 
at your product! So, take the plunge! Send in a product for review!! It's FREE advertising. 



So, you want to subscribe....but you think it's TOO MUCH!? 
Guess what? It's only *20 a year, now! We're now quarterly!! 



Just when you thought it was safe to read Blacklisted! 411 

Behold! Your copy of Blacklisted! 411k MISSING! 

Who TOOK it?! 
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HackersForum 



|K0"5V rlOd! We found this mod floating around on the internet, 
Article: 1354 of rec radio scanner The article was also printed in 
Monitoring Times, January 1993. They may be reached @ 1-800-438- 
8155. 

The PRO-39 handheld scanner from Realistic (R) is a fine performer, but 

its 800 MHz range is interrupted by the factory censoring of cellular 

frequency coverage. Here's the "fix" for it. Remember, however, that it is 

unlawful to listen to cellular phone calls, (haha) 

(NOTE: These procedures may void your warranty Do not attempt them 

unless you are familiar with small component soldering ) 

TOOLS NEEDED: Fine-tipped soldering iron, desoldering wick, small 

Philips screwdriver, long-nosed pliers, rosin-core solder. 



(3) Unplug the two wiring harnesses at their connectors and remove the 
six bright colored screws [that hold] the circuit board in place. Unsolder 
the ground wire from the lower right corner of the circuit board Unsolder 
the two wire connections from the BNC antenna connector at the board. 
Carefully lift the board (grasping it near the Molex connector) and set it 
aside. 

(4) Remove the two bright colored screws from the next circuit board 
Carefully unplug the two-wire connector. Unsolder and lift the rectangular 
metal shield exposing the diodes. 

(5) Carefully unsolder and remove diode D6 only: this will restore the 
missing cellular frequencies which can be searched in appropriate 30 kHz 
steps. 



(1) [Turn off your radio. Removing the batteries when the radio is ON can 
erase the memory! -jqt] Remove the battery door, holder and [battery 
pack] from the bottom of the radio. 



(2) Remove the four screws from the back of the scann 
the back off. 



This completes the cellular restoration. Reverse all procedures to 
reassemble the radio and test it by entering any frequency between 869- 
894 MHz Curious about the other diodes? D4 would enable 68-88 MHz 
and carefully lift coverage, but deletes 30-54 MHz; D5 (present) allows 800 MHz band 
operation; and D7 would make cellular spacing 12.5 kHz (incorrect). 



You and Your Complex Interface Adapter 



The most misunderstood and most maligned component in the Amiga has got to be the 8520 Complex Interface Adapter 
(CIA). It has been blamed for everything including world hunger at one point or another A discussion of what a CIA does and 
more importantly what it does NOT do is in order. 

There are two CIA's in every Amiga system. They are designated CIAA and CIAB. These 8520 IC's (Integrated Circuits) are 
general purpose Input/Output controllers that are used in other microcomputer systems as well. In the Amiga, they handle 
keyboard, serial, parallel and other I/O functions like portion of joystick data. The table below details the pin-outs for each of 
these IC's and their corresponding function (Pin #, Signal name, Amiga function). 



CIAA (U7 on A500/U300 on B2000) 



CIAB(U8 on A500/U301 on B2000) 



Pin# 


Signal 


Amiga Function 


2 


PA0 


MEM Overlay Bit 


3 


PA1 


LED Light DIM 


4 


PA2 


Disk Change 


5 


PA3 


Write Protect 


6 


PA4 


Disk Track 00 


7 


PA5 


Disk Ready 


8 


PA6 


Game Port Fire (3) 


9 


PA7 


Game Port 1 Fire (3) 


10 


PB0 


DataO 


11 


PE1 


Data 1 


12 


PB2 


Data 2 


13 


PB3 


Data 3 


14 


PB4 


Data 4 


15 


PB5 


Data 5 


16 


PB6 


Data 6 


17 


PB7 


Data 7 


18 


PC 


Strobe (clock) 


24 


F 


Ack Control 


26-33 


D0-D7 


Input Data 


34 


Reset 


Reset Line 


35-38 


RS0-RS3 


Register Storage 


39 


SP 


Keyboard Data 


40 


CNT 


Keyboard Clock 



Pin# 


Signal 


Amiga Function 


2 


PA0 


Centronics Busy (1) 


3 


PA1 


Paper Out (1) 


4 


PA2 


Centronics SEL(1) 


5 


PA3 


RS232C DSR (2) 


6 


PA4 


RS232C CTS (2) 


7 


PA5 


RS232C CD (2) 


8 


PA6 


RS232C RTS (2) 


9 


PA7 


RS232C DTR (2) 


10 


PB0 


Disk Step 


11 


PB1 


Disk DIR 


12 


PB2 


Disk Side Select 


13 


PB3 


Select 1 st Drive 


14 


PB4 


Select 2nd Drive 


15 


PB5 


Select 3rd Drive 


16 


PB6 


Select 4th Drive 


17 


PB7 


Motor Control 


18 


PC 


Not Used 


24 


F 


Disk Index 


26-33 


D0-D7 


Input Data 


34 


Reset 


Reset Line 


35-38 


RS0-RS3 


Register Storage 


39 


SP 


Tied to Busy (1) 


40 


CNT 


Tied to Paper out (1 



Legend for Pinout Chart: 

(1) Centronics compatible parallel port (printer etc ) 

(2) RS232C compatible serial port (Modem etc.) 

(3) This can either be a joystick fire button, a mouse left button or a light pen beam trigger. 

The main purpose of this chart is to show you exactly what is connected to these devices and more importantly what is not! 
For example, take the case of a joystick that does not respond to up and down movements or a problem with a mouse that 
seems to have a mind of it's own. Neither of these problems could have anything to do with our friendly 8520's. Many people 
have stated that the best way to troubleshoot a problem with an 8520 is to exchange them and see if the problem corrects 
itself for moves to another area of the system. If you look at the CIAA and CIAB carefully, you will notice that many I/O 
functions are split between them. For instance, the parallel port gets its data from the CIAA, but is controlled via the CIAB 



The most common failure of an 8520 is due to ignoring the first rule of computing: NEVER PLUG OR UNPLUG ANYTHING 
INTO YOUR AMIGA WITH THE POWER ON! Many ports that are handled via the 8520 are directly connected to the IC. 
When you pull off a mouse cable or a serial cable that has that nice metal shield around it, you are asking for trouble. Just in 
case you decide not to head this warning, here are the part numbers!: 

8520 Commodore part #: 318029-02 These can be obtained from Commodore directly or by any number of mail-order 
dealers 
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The Phone Tap! 



They're Listening to YOU! 

It's late one night and you're talking to your best counterpart you recently met on some BBS - trying to pull another all-nighter. 
Anyhow, as you're talking about the latest in sex toys or new hacking techniques, you notice a click or two. "Hello?" "Yeah, 
I'm here..." "What was that?" "I dunno. ..thought it was you." "No, it wasn't me. . maybe someone's listening. " <haha> You 
both laugh it off and jokingly mention someone listening in on your convo. The funniest part about this is the fact that it is 
completely possible that someone *IS* listening to you whether it be just for the hell of it or for testing purposes of some type, 

or some dork phone man 
accidently tied into YOUR line 
while messing around in a nearby 
jbox down the street. Whatever 
the reason, it's possible for 
someone... like me, like you, like 
your neighbor, to listen in on your 
conversations without your 
knowledge. Pretty freaky, huh? 
Not really. Our land lines are so 
incredibly unsecure, it's plain 
downright sickening to think 
about! All it requires is a very very 
minimal knowledge of how phone 
lines work (wow, those two wires 
go to THAT house, duh), a phone 
(beige box ortestset, etc ) and the 
will to eavesdrop on someone. 
Heck, if you live in an apartment 
building with quite a few tenants, 
it would be a good idea to check 
out your phone wiring every so 
often just to make sure nobody is 
"tapped" into your line out at the 
nearest jumper box. The phone 
companies like to refer to this 
phenomenon as a "hot drop" 
which is, essentially, a "tap" into 
your line. It's very illegal to do 
such a thing, but it's hard to prove 
and prosecute, so chew on that 
one for awhile We suggest that 
you never, ever use a cordless 
phone because it's the least 
secure of ALL telecommunication 
methods available. You might as 
well YELL across a crowded 
room, rather than waste the 
money making a phone call on a 
cordless phone. Anyhow, the 
whole point to this small article is 
to make readers aware that their 
words over phone lines are not 
secure and may be monitored at 
any time. So, if you ever hear a 
click on the line or the volume of 
the audio seems a little lower than 
normal, think for a second - 
SOMEONE COULD BE 

LISTENING TO YOU other than 
the called or calling party. It's a 
scary world out there, people! 



Was it your best friend? Your Teacher? Your MOM? Possibly 

Was it a co-worker or your boss? Maybe your "Significant Other?" Who knows! 

Trust NO ONE! 
HOLD ON TO EVERY SINGLE COPY OF 
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This message was brought to you by the Blacklisted! 411 Preservation Society! 
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Cable Jetevision tlem 




In this issue, we're going to talk about the termination tool and what it does. First, terminators are those 
annoying little things attached to the cable connections inside your cable box outside. This makes it really 

hard to hook up your cable. Heh.. The 
picture located to the left has an 
example of a basic termination tool 
and the actual terminator that is used 
to cap off unused cable ports near the 
subscribers home. The tool is very 
simple to use. The thin end of the tool 
is slipped into the opening of the 
terminator. Along the inside surface 
of the terminator are two small slots. 
These slots are matched up to the 
tool. Inside the shaft of the tool, there 
are two metal protrusions which are retracted by the slider, located just below the handle of the tool... Pull the 
slider towards the handle and the metal protrusions will retract, allowing the shaft to be inserting into the 
terminator. The inside of the terminator and the outside are loose fitting, on purpose. You can turn the outside 
of the terminator by hand (without the tool) and the inner portion will not turn, making it nearly impossible to 
remove it. Insertion of the terminator tool, allows one to turn the inner portion of the terminator, thus being 
able to remove it. There are at least 3 versions of this tool, with the only difference being the physical 
diameter of the shaft. This is effective enough to keep most people from hooking up their cable and making 
it look nice... People resort to splicing cable, etc. which is a dead give away when the cable guys happen to 
be working in the box right outside!! The tool shown above is the one used by Paragon Cable in the Orange 
County area. If you have any sources for such tools, please contact us about it. Information is the key. 

What you see pictured to the left 
are two Channel 21 "Disney" 
filters They're simply notch filters, 
tuned to channel 21 on the 
paragon cable band. Normally, 
(without filter) channel 21 comes 
through with a "beeping" sound 
and a snowy picture. ...so, you 
cannot see it, nor hear it. This is 
reversed from the normal trap 
system Usually, you cannot 
see/hear a channel unless the 
filter is removed Anyhow, 
addition of one of the pictured 
filters restores The Disney 
Channel. It removes added noise. 




The tool pictured to the left is of 
a "star key" tool It's another 
tool used by some of the cable 
companies. It's much like 
those little keys used on car 
rims to keep people from 
making off with your brand new 
tires. Anyhow, the key is 
simple It has a special pattern 
on the tip of it and it fits into a 
special "screw" that's used on 
cable connector box, in the 
place of padlocks. The pattern 
on the tip does, somewhat, 
resemble a star - perhaps, 
that's why "star key tool"...? 




Back Issues! 



We still have a supply of first and second quarter 1995 issues available for purchase. They're $5 each ($6 Canada - $9 
Foreign) and they will be sent to you first class postage within 1 week of receipt of back issue order, while supplies last. 

[ ] Volume 2, Issue 1 - First Quarter - January 1995. Quantity: 



Note: We do NOT have any first 
volume issues available at this time. 



I 

I [ ] Volume 2, Issue 2 - Second Quarter - April 1995. Quantity: 

' Please photocopy this page, fill out this Back Issue portion, indicating which issues you want and the quantiy you desire. 
| Enclose with payment (check, money order, (ahem) cash or Credit Card Information - photocopy and fill out information of 
■ next page as well ) Mail to: 

I Blacklisted! 411 Back Issues. 
i P.O. Box 2506 

I Cypress, Ca 90630 

h_ ___..._____•_ — ________.-___ — _ — — __. 

Join Blacklisted! 411 New Subscriber Initiation! 

You can run, you can logoff, you can even mask your Caller ID 

BUT, you can't HIDE from US! We'll find you! 
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Subscribe TODAY! 



Are you sick and tired of having to fight tooth and nail every month, just to get a copy of Blacklisted! 411? Are 
you tired of having to "stalk" your local bookstore so you can be the first to find an issue of Blacklisted! 41 1 on 
the shelves before anyone else does? Are you fed up with the excuse, "Sorry, we don't carry that magazine 
here. Go somewhere ELSE!"? Are you irritated because you have a hard time just trying to find our lovely 
magazine? Do you feel like screaming? Do you feel like beating up your local bookstore manager? Do you 
want to find the person(s) responsible for making your life such a mess by taking the last issues available in 
your area? How would you like to get your very own issue each and every month with no worries at all? 
Imagine for a moment: No fighting, No stalking, No more excuses, No more irritations, No more screaming, 
No more hunting, Really, this is ALL possible? How, you might ask.... It's so simple! SUBSCRIBE!!! 

Yes, it's THAT simple! 



Blacklisted! 411 




Wanted: Dead or Alive 



IS THIS What it'll get down to? 

Don't let yourself fall into this dilemma! 

It's happened too many times already! 

RESERVE YOUR COPY TODAY! 

SUBSCRIBE! 

It's fun.Jt's easyJf's the best! 

"Everyone else is doing it 1 



•in 



Yearly subscription: U.S. $20, Canada $24 (U.S. Funds), Foreign $35 (U.S. Funds) 

Address all subscription correspondence to: 

Blacklisted! 411 Subscription Dept., P.O. Box 2506, Cypress, Ca 90630 

Blacklisted! 411 Office Line:(31 0)596-4673, Blacklisted! 411 FAX Line: (310)493-3998 
Blacklisted! 411 is published quarterly by Syntel Vista, P.O. Box 2506, Cypress, Ca 90630 



Blacklisted! 411 Subscription Card 



You can subscribe in any number of ways. Check by Phone, Check By Fax, Check via Mail, Credit Card By Phone, Credit Card via Mail, 
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"I don't know, Bob.. Jt looks like apayphone to me!" 
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WARNING 

NEIGHBORHOOD WATCH 

If I don't call the sheriff, my neighbor will! If I don't nose around in your business, my 
neighbor will! if I don't complain, my neighbor will! If I don't piss you off, my neighbor 
will! If I don't let my dog take a dump on your lawn and then not pick it up, my neighbor 
will! (no, he won't pick it up!) If I don't turn your power off, my neighbor will! If I don't 
come over and ask to borrow something, my neighbor will! If I don't annoy you, my 
neighbor will! If I don't keep you up late at night because of my dog, my neighbor will! If 
I don't mess around with your wife (or husband), my neighbor will! If I don't throw rocks 
at your kids when they walk by, my neighbor will! If I don't come up with some new and 
exciting way to get on that last nerve of yours and make your day miserable, my neighbor, 
will! We assure you, we are ALL watching you - even now, as you read this! 
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